vulns.co
/
GKData.io MCP

Adobe · 3 min read

Adobe Public Bug Bounty

Adobe · Intigriti. Policy reviewed 2026-10-03. Live terms govern participation.

Open current policy Reviewed policy

Policy and restrictions

Product-specific plans override general guidance and constrain environments/accounts. AI-assisted findings need human validation. Privacy violations, disruption, social engineering, unapproved customer environments and premature disclosure are prohibited.

Eligibility and submission status

First reproducible, previously unknown eligible reports qualify. Employee/immediate-family exclusions last 12 months; specified network-access contractors, six. Platform adulthood/guardian-approved age-16 and legal/employer conditions apply.

Visible policies and login invitations do not verify acceptance.

Advertised rewards

Tiers: $150–$15,000, $100–$10,000 and $75–$5,000. Shared-root-cause findings receive one bounty; repeated patterns have a two-report full-bounty cap. Dollar denomination remains unverified, so normalized bounds remain null.

Advertised schedules and exceptional ceilings are not individual award evidence.

Published scope snapshot

Captured 2026-10-03. Check the current policy for changes before participating.

In scope · 40 published rows
AssetTypeGroup / eligibility
Acrobat PDF SpacesAI ModelTier 1
Acrobat Create PresentationsAI ModelTier 1
Acrobat Create PodcastAI ModelTier 1
Acrobat AI AssistantAI ModelTier 1
Adobe Express AI AssistantAI ModelTier 1
Lightroom AI FeaturesAI ModelTier 1
Adobe Firefly AI FeaturesAI ModelTier 1
Photoshop AI AssistantAI ModelTier 1
Adobe Stock AI StudioAI ModelTier 1
Frame.io iOS ApplicationPublished location: https://apps.apple.com/gb/app/frame-io/id1056295002iOSTier 2
Adobe Fresco (iOS)Published location: https://apps.apple.com/us/app/adobe-fresco-draw-paint-app/id1458660369iOSTier 2
Adobe Photoshop Express Mobile App (iOS)Published location: https://apps.apple.com/us/app/photoshop-express-photo-editor/id331975235iOSTier 2
Lightroom Video & Photo Editor (IOS)Published location: https://apps.apple.com/gb/app/lightroom-video-photo-editor/id878783582iOSTier 2
Lightroom Video & Photo Editor (Android)Published location: https://play.google.com/store/apps/details?id=com.adobe.lrmobile&hl=en_GBAndroidTier 2
Adobe Scan Mobile App (iOS)Published location: https://apps.apple.com/us/app/adobe-scan-pdf-ocr-scanner/id1199564834iOSTier 2
Adobe Scan Mobile App (Android)Published location: https://play.google.com/store/apps/details?id=com.adobe.scan.android&hl=en_GBAndroidTier 2
Acrobat Reader Mobile App (iOS)Published location: https://apps.apple.com/us/app/acrobat-reader-pdf-editor/id469337564iOSTier 2
Acrobat Reader Mobile App (Android)Published location: https://play.google.com/store/apps/details?id=com.adobe.reader&hl=enAndroidTier 2
*.acrobat.adobe.comWildcardTier 2
stock.adobe.comPublished location: http://stock.adobe.comURLTier 2
firefly.adobe.comPublished location: http://firefly.adobe.comURLTier 2
Adobe ColdFusion without ColdFusion AdministratorOtherTier 2
ColdFusion AdministratorOtherTier 3
*.lightroom.adobe.comWildcardTier 2
photoshop.adobe.comPublished location: http://photoshop.adobe.comURLTier 2
Adobe Commerce, Adobe Commerce B2B and Magento Open SourceOtherTier 2
account.magento.comPublished location: http://account.magento.comURLTier 3
commercemarketplace.adobe.comPublished location: http://commercemarketplace.adobe.comURLTier 3
repo.magento.comPublished location: http://repo.magento.comURLTier 3
magento.comPublished location: http://magento.comURLTier 3
learningmanagerstage4.adobe.comPublished location: http://learningmanagerstage4.adobe.comURLTier 3
net.s2stagehance.comPublished location: http://net.s2stagehance.comURLTier 3
new.express.adobe.comPublished location: http://new.express.adobe.comURLTier 3
portfolio.ccpsx.comPublished location: http://portfolio.ccpsx.comURLTier 3
fonts.adobe.comPublished location: http://fonts.adobe.comURLTier 3
account.adobe.comPublished location: http://account.adobe.comURLTier 3
auth.services.adobe.comPublished location: http://auth.services.adobe.comURLTier 3
adobeid-na1.services.adobe.comPublished location: http://adobeid-na1.services.adobe.comURLTier 3
ims-na1.adobelogin.comPublished location: http://ims-na1.adobelogin.comURLTier 3
federatedid-na1.services.adobe.comPublished location: http://federatedid-na1.services.adobe.comURLTier 3
Out of scope · 0 published rows
AssetTypeGroup / eligibility
No rows captured. This does not establish that the program has no assets or restrictions.

Review limitations

  • Updates text retrieval previously failed; no change-log/announcement reviewed.
  • Test-plan/CVSS attachments remain unreviewed; product conditions are incomplete.
  • Platform euro settlement does not establish Adobe dollar denomination.
  • Logged-out review; authenticated eligibility and open/paused status unverified.
  • High-level context omits asset inventories and testing instructions. Live terms prevail; this record grants no authorization.

Sources and provenance

  1. Adobe Public Bug Bounty policy Adobe / Intigriti · reviewed 2026-10-03
  2. Intigriti Researcher Terms & Conditions Intigriti · reviewed 2026-10-03
  3. Published Intigriti asset table Adobe · reviewed 2026-10-03

Record reviewed 2026-10-03. Snapshot 53796974ace8. Open the complete JSON contract.

GitHub snapshot 2026-10-04

53796974ace8 · JSON exports & schemas · CC BY 4.0 content / MIT software