Adobe’s November 2026 Patch Tuesday updates fix roughly 110 vulnerabilities across nine products.
New patches are available for Adobe Experience Manager (AEM), Audition, After Effects, Connect, Content Credentials SDK, Dimension, Media Encoder, Photoshop, and Premiere.
Critical-severity issues have been patched in Adobe Connect and AEM, including six Connect flaws with a CVSS score of 10.
The critical flaws include SSRF, path traversal, incorrect authorization, CRLF injection, XXE, code injection, SQL injection, and XSS issues. They can be exploited for privilege escalation and arbitrary code execution.
A total of 38 vulnerabilities have been resolved in AEM and Connect, including high- and medium-severity issues whose exploitation can lead to privilege escalation, file system read, memory exposure, arbitrary code execution, and bypassing security features.
High-severity bugs have been fixed in After Effects, Media Encoder, Premiere, Dimension, Audition, and Photoshop.
The Content Credentials Rust SDK (and the C2PA Tool) received patches for roughly a dozen low- and medium-severity issues.
Adobe says it’s not aware of attacks exploiting the newly patched vulnerabilities.
The Connect and AEM patches have a priority rating of 2; the rest are rated 3, which means they are unlikely to be exploited in the wild.
Related: Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities
Related: Adobe Patches 176 Vulnerabilities Across 11 Products
Related: Adobe Patches Critical Flaws in Connect, AEM Forms
