Adobe C2Pa vulnerabilities
55 known vulnerabilities affecting adobe/c2pa.
Total CVEs
55
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH15MEDIUM40
Vulnerabilities
Page 3 of 3
CVE-2026-48302P4MEDIUMCVSS 6.2≤ 0.84.02026-07-14
CVE-2026-48302 [MEDIUM] CWE-20 CVE-2026-48302: CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
nvd
CVE-2026-48443P4MEDIUMCVSS 6.2fixed in 0.90.62026-08-11
CVE-2026-48443 [MEDIUM] CWE-400 CVE-2026-48443: CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
nvd
CVE-2026-34669P4MEDIUMCVSS 6.2fixed in 0.80.12026-05-12
CVE-2026-34669 [MEDIUM] CWE-20 CVE-2026-34669: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Imprope
CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user in
nvd
CVE-2026-34668P4MEDIUMCVSS 6.2fixed in 0.80.12026-05-12
CVE-2026-34668 [MEDIUM] CWE-20 CVE-2026-34668: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Imprope
CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user in
nvd
CVE-2026-34679P4MEDIUMCVSS 6.2fixed in 0.80.12026-05-12
CVE-2026-34679 [MEDIUM] CWE-20 CVE-2026-34679: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Imprope
CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user in
nvd
CVE-2026-71444P4MEDIUMCVSS 6.2≤ 0.89.02026-08-25
CVE-2026-71444 [MEDIUM] CWE-191 CVE-2026-71444: CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
nvd
CVE-2026-48387P4MEDIUMCVSS 6.2fixed in 0.90.62026-08-11
CVE-2026-48387 [MEDIUM] CWE-190 CVE-2026-48387: CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could re
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
nvd
CVE-2026-48435P4MEDIUMCVSS 6.2fixed in 0.90.62026-08-11
CVE-2026-48435 [MEDIUM] CWE-191 CVE-2026-48435: CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
nvd
CVE-2026-48434P4MEDIUMCVSS 6.2fixed in 0.90.62026-08-11
CVE-2026-48434 [MEDIUM] CWE-400 CVE-2026-48434: CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
nvd
CVE-2026-76189P4MEDIUMCVSS 6.2≤ 0.89.02026-08-25
CVE-2026-76189 [MEDIUM] CWE-191 CVE-2026-76189: CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
nvd
CVE-2026-71389P4MEDIUMCVSS 6.2fixed in 0.90.62026-08-11
CVE-2026-71389 [MEDIUM] CWE-191 CVE-2026-71389: CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
nvd
CVE-2026-34678P4MEDIUMCVSS 6.2fixed in 0.80.12026-05-12
CVE-2026-34678 [MEDIUM] CWE-400 CVE-2026-34678: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontr
CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue do
nvd
CVE-2026-34673P4MEDIUMCVSS 6.2fixed in 0.80.12026-05-12
CVE-2026-34673 [MEDIUM] CWE-400 CVE-2026-34673: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontr
CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue do
nvd
CVE-2026-34677P4MEDIUMCVSS 6.2fixed in 0.80.12026-05-12
CVE-2026-34677 [MEDIUM] CWE-400 CVE-2026-34677: CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontr
CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue do
nvd
CVE-2026-71390P4MEDIUMCVSS 4.0fixed in 0.90.62026-08-11
CVE-2026-71390 [MEDIUM] CWE-20 CVE-2026-71390: CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user interaction.
nvd
← Previous3 / 3