EXPOSURES › CVE-2019-7106

CVE-2019-7106

CRITICAL

DETAIL

SourceNVD · cve Published2019-05-23 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2019-7106 ↗

▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED

Adobe · vendor apple · vendor macos · product xd · product

DESCRIPTION

Adobe XD versions 16.0 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execution.

SENTIMENT · TRUSTED SOURCES

synthesis severe-fallout -0.60

Adobe XD path traversal flaw allowing arbitrary code execution is treated as a critical, widely acknowledged security failure with severe implications for users relying on the software.

cooey ↗ severe-fallout -0.80

NVD confirms the critical nature of the path traversal vulnerability in Adobe XD, highlighting the severe risk of arbitrary code execution.

"Adobe XD versions 16.0 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execution."

app.opencve.io ↗ severe-fallout -0.70

OpenCVE lists the vulnerability as critical (CVSS 9.8), reinforcing the severity of the path traversal flaw in Adobe XD.

"CVE-2019-7106 2 Adobe , Apple 2 Xd , Macos 2026-09-15 9.8 Critical Adobe XD versions 16.0 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code exe"

www.linkedin.com ↗ severe-fallout -0.50

LinkedIn article focuses on broader Adobe security waves but does not directly address CVE-2019-7106, offering no specific sentiment toward Adobe for this flaw.

www.cvefind.com ↗ severe-fallout +0.00

CVE Find provides a general vulnerability database without specific commentary on Adobe or CVE-2019-7106.

vulnpedia.com ↗ severe-fallout +0.00

Vulnpedia provides a general vulnerability reference without specific commentary on Adobe or CVE-2019-7106.

labs.cloudsecurityalliance.org ↗ severe-fallout +0.00

CISO Daily Briefing discusses unrelated security topics and does not mention Adobe or CVE-2019-7106.

recentbreaches.com ↗ severe-fallout +0.00

Recent Breaches focuses on data breach notices and does not address CVE-2019-7106 or Adobe.

AFFECTED FEDRAMP PRODUCTS · 8

PRODUCT	PROVIDER	STATUS	MATCH
Adobe Acrobat Sign for Government Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Analytics Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Campaign Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Connect Managed Services (ACMS-GC) Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Creative Cloud for Enterprise Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Document Cloud (PDF Services & Adobe Sign) Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Experience Manager Managed Services (AEMMS-GC) Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Learning Manager Adobe	Adobe	Authorized	vendor-exact · 0.90