CVE-2026-83964: Adobe Connect | Improper Certificate Validation (CWE-295)

Q: What level of access does an attacker need to exploit this issue?

The attack vector is local, so the attacker needs local access to the affected system. No privileges or user interaction are required.

Q: What is the expected security impact if exploitation succeeds?

The reported impact is disclosure of sensitive information, including sensitive memory. The available assessment indicates no integrity or availability impact.

Published Sep 22, 2026

Updated

Adobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction.

Affected Software

5 affected components

Adobe Connect

All of the following

Adobe Connect<12.12

Any of the following

Apple macOS

Microsoft Windows

Adobe Connect For Mobile Android<4.5

Event History

Sep 22, 2026

CVE Published

via MITRE·06:54 PM

Data Sourced

via MITRE·06:54 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attack vector is local, so the attacker needs local access to the affected system. No privileges or user interaction are required.

What is the expected security impact if exploitation succeeds?