Loading vulnerability…
Code Injection in Adobe Connect Desktop and Mobile
CVE-2026-48360 is a code injection vulnerability in Adobe Connect Desktop for Windows and macOS and Adobe Connect Mobile for Android. Improper control of code generation allows an attacker to execute arbitrary code in the context of the current user when a victim visits a maliciously crafted URL or interacts with a compromised web page. Affected releases include Windows version 2026.8.51 and earlier, macOS Intel version 2026.01.39 and earlier, macOS Silicon version 2026.08.45 and earlier, and Android version 4.4 and earlier. The vulnerability has a critical CVSS score of 9.6, requires no prior attacker privileges, and has changed security scope.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation permits arbitrary code execution with the current user's privileges, potentially compromising data confidentiality and integrity and disrupting availability. The CVSS assessment assigns high impact to confidentiality, integrity, and availability and indicates that exploitation can cross a security authority boundary. Elevated privileges beyond those of the current user are not established.
If you can’t patch tonight, do this now.
Until updates are applied, avoid untrusted URLs and interaction with potentially compromised web pages. No vendor-provided workaround is identified; these precautions reduce exposure but do not correct the vulnerability.
Patch, then assume compromise.
Apply the updates addressed by Adobe security bulletin APSB26-182. Upgrade Adobe Connect Desktop for Windows to version 2026.9.61 or later, Desktop for macOS Intel to 2026.10.170 or later, Desktop for macOS Silicon to 2026.10.66 or later, and Mobile for Android to 4.5 or later.
No public exploits tracked yet. Mallory keeps watching.
11 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.