Adobe Connect Desktop/Mobile critical code injection CVE-2026-48360 (CVSS 9.6): update Windows to 2026.9.61, Mac Silicon 2026.10.66, Mac Intel 2026.10.170, Android Mobile 4.5
Adobe's priority-2 bulletin APSB26-182 (Oct 27) fixes CVE-2026-48360, a critical code-injection flaw (CVSS 9.6, network, no privileges, user interaction) that can lead to arbitrary code execution in Adobe Connect Desktop and Adobe Connect Mobile for Android. Adobe is not aware of exploitation.
Affected: Desktop Windows v2026.8.51 and below, Mac Silicon v2026.08.45 and below, Mac Intel v2026.01.39 and below; Mobile Android 4.4 and earlier. Fixed: Windows 2026.9.61, Mac Silicon 2026.10.66, Mac Intel 2026.10.170, Mobile Android 4.5. Credit: researcher a_l.
Sources: Adobe: APSB26-182 Security update available for Adobe Connect (Oct 27) · The Hacker News: Adobe Fixes 8 Critical Campaign Classic Flaws (Oct 28)