Adobe Connect contains an improper certificate validation flaw that can expose sensitive memory contents to an adversary. The vulnerability enables an attacker to read data that should be protected, potentially leaking confidential information. Exploitation of the flaw can be carried out without any user interaction, making it a straightforward remote abuse.

The affected products are Adobe Connect and the Adobe Connect Android Mobile App. No specific patch or version numbers are supplied in the data, so any deployment of these products that has not applied the latest update is potentially vulnerable.

The CVSS score of 6.2 categorizes the weakness as moderate, and the EPSS score is unavailable. The vulnerability is not listed in CISA KEV. The attack vector is inferred to be network-based, targeting the Connect server’s TLS handling. Because user interaction is not required, an attacker can exploit the issue from a remote location, potentially compromising sensitive data.