CVE-2025-27203
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-07-08

Last updated on: 2026-04-22

Assigner: Adobe Systems Incorporated

Description
Adobe Connect versions 24.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does require user interaction and scope is changed.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-07-08
Last Modified
2026-04-22
Generated
2026-05-07
AI Q&A
2025-07-09
EPSS Evaluated
2026-05-05
NVD
CVE-2025-27203
EUVD
EUVD-2025-20691
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
adobe connect_desktop_application From 2025.5.5 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-502 The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability is a Deserialization of Untrusted Data issue in Adobe Connect versions 24.0 and earlier. It allows an attacker to execute arbitrary code by exploiting the way the software processes serialized data. However, exploitation requires user interaction and the scope of the impact is changed.


How can this vulnerability impact me? :

If exploited, this vulnerability can lead to arbitrary code execution, which means an attacker could potentially take control of the affected system, leading to severe impacts such as data loss, system compromise, or disruption of services.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart