CVE-2025-27203

9.6 criticalEPSS 1.2%

Critical (9.6) in adobe connect desktop application. EPSS 1.2% chance of exploitation in the next 30 days.

Adobe Connect versions 24.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does require user interaction and scope is changed.

Severity

CVSS 3.1

9.6 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-502
Published: 2025-07-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:connect_desktop_application

References

https://helpx.adobe.com/security/products/connect/apsb25-61.html

Check your stack JSON