Adobe C2Pa-Web vulnerabilities
34 known vulnerabilities affecting adobe/c2pa-web.
Total CVEs
34
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH9MEDIUM25
Vulnerabilities
Page 2 of 2
CVE-2026-48298P4MEDIUMCVSS 6.2≤ 0.7.02026-07-14
CVE-2026-48298 [MEDIUM] CWE-191 CVE-2026-48298: CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
nvd
CVE-2026-47903P4MEDIUMCVSS 6.2≤ 0.7.12026-06-09
CVE-2026-47903 [MEDIUM] CWE-20 CVE-2026-47903: CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Imprope
CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Improper Input Validation vulnerability. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
nvd
CVE-2026-47904P4MEDIUMCVSS 6.2≤ 0.7.12026-06-09
CVE-2026-47904 [MEDIUM] CWE-400 CVE-2026-47904: CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontr
CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
nvd
CVE-2026-47902P4MEDIUMCVSS 6.2≤ 0.7.12026-06-09
CVE-2026-47902 [MEDIUM] CWE-400 CVE-2026-47902: CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontr
CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
nvd
CVE-2026-47905P4MEDIUMCVSS 6.2≤ 0.7.12026-06-09
CVE-2026-47905 [MEDIUM] CWE-400 CVE-2026-47905: CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontr
CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
nvd
CVE-2026-34678P4MEDIUMCVSS 6.2fixed in 0.7.12026-05-12
CVE-2026-34678 [MEDIUM] CWE-400 CVE-2026-34678: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontr
CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue do
nvd
CVE-2026-34669P4MEDIUMCVSS 6.2fixed in 0.7.12026-05-12
CVE-2026-34669 [MEDIUM] CWE-20 CVE-2026-34669: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Imprope
CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user in
nvd
CVE-2026-34668P4MEDIUMCVSS 6.2fixed in 0.7.12026-05-12
CVE-2026-34668 [MEDIUM] CWE-20 CVE-2026-34668: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Imprope
CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user in
nvd
CVE-2026-34679P4MEDIUMCVSS 6.2fixed in 0.7.12026-05-12
CVE-2026-34679 [MEDIUM] CWE-20 CVE-2026-34679: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Imprope
CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user in
nvd
CVE-2026-48357P4MEDIUMCVSS 6.2≤ 0.7.02026-07-14
CVE-2026-48357 [MEDIUM] CWE-400 CVE-2026-48357: CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
nvd
CVE-2026-48354P4MEDIUMCVSS 6.2≤ 0.7.02026-07-14
CVE-2026-48354 [MEDIUM] CWE-190 CVE-2026-48354: CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could re
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
nvd
CVE-2026-34673P4MEDIUMCVSS 6.2fixed in 0.7.12026-05-12
CVE-2026-34673 [MEDIUM] CWE-400 CVE-2026-34673: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontr
CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue do
nvd
CVE-2026-34677P4MEDIUMCVSS 6.2fixed in 0.7.12026-05-12
CVE-2026-34677 [MEDIUM] CWE-400 CVE-2026-34677: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontr
CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue do
nvd
CVE-2026-48302P4MEDIUMCVSS 6.2≤ 0.7.02026-07-14
CVE-2026-48302 [MEDIUM] CWE-20 CVE-2026-48302: CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
nvd
← Previous2 / 2