Adobe
83 CVEs in CISA KEV — 11 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2024-34102 |
Commerce and Magento Open Source | — | 0.9999 | 2024-07-17 | 2024-08-07 | Adobe Commerce and Magento Open Source contain an improper restriction of XML ex | |
CVE-2023-29300 |
ColdFusion | — | 0.9999 | 2024-01-08 | 2024-01-29 | RW | Adobe ColdFusion contains a deserialization of untrusted data vulnerability that |
CVE-2023-29298 |
ColdFusion | — | 0.9979 | 2023-07-20 | 2023-08-10 | Adobe ColdFusion contains an improper access control vulnerability that allows f | |
CVE-2023-38205 |
ColdFusion | — | 0.9976 | 2023-07-20 | 2023-08-10 | Adobe ColdFusion contains an improper access control vulnerability that allows f | |
CVE-2024-20767 |
ColdFusion | — | 0.9851 | 2024-12-16 | 2025-01-06 | Adobe ColdFusion contains an improper access control vulnerability that could al | |
CVE-2023-26360 |
ColdFusion | — | 0.9734 | 2023-03-15 | 2023-04-05 | Adobe ColdFusion contains a deserialization of untrusted data vulnerability that | |
CVE-2023-38203 |
ColdFusion | — | 0.9707 | 2024-01-08 | 2024-01-29 | RW | Adobe ColdFusion contains a deserialization of untrusted data vulnerability that |
CVE-2025-54236 |
Commerce and Magento | — | 0.9466 | 2025-10-24 | 2025-11-14 | Adobe Commerce and Magento Open Source contain an improper input validation vuln | |
CVE-2026-71362 |
Commerce and Magento | 9.1 | 0.9049 | 2026-09-24 | 2026-09-27 | Adobe Commerce and Magento contains an incorrect authorization vulnerability tha | |
CVE-2025-54253 |
Experience Manager (AEM) Forms | — | 0.8877 | 2025-10-15 | 2025-11-05 | Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that | |
CVE-2023-21608 |
Acrobat and Reader | — | 0.5943 | 2023-10-10 | 2023-10-31 | Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for | |
CVE-2026-48356 |
Commerce and Magento | 9.3 | 0.5908 | 2026-10-27 | 2026-11-10 | Adobe Commerce and Magento contain an unrestricted upload of file with dangerous | |
CVE-2026-48282 |
ColdFusion | 10.0 | 0.4239 | 2026-07-07 | 2026-07-10 | Adobe ColdFusion contains a path traversal vulnerability that could lead to arbi | |
CVE-2023-26359 |
ColdFusion | — | 0.1699 | 2023-08-21 | 2023-09-11 | Adobe ColdFusion contains a deserialization of untrusted data vulnerability that | |
CVE-2026-34621 |
Acrobat and Reader | 8.6 | 0.0723 | 2026-04-13 | 2026-04-27 | Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows | |
CVE-2023-26369 |
Acrobat and Reader | — | 0.0675 | 2023-09-14 | 2023-10-05 | Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allo | |
CVE-2026-75650 |
Commerce and Magento | — | 0.0395 | 2026-09-08 | 2026-09-11 | Adobe Commerce and Magento Open Source contain an improper neutralization of spe | |
CVE-2009-3459 |
Acrobat and Reader | — | — | 2026-05-20 | 2026-06-03 | Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability whic | |
CVE-2020-9715 |
Acrobat | — | — | 2026-04-13 | 2026-04-27 | Adobe Acrobat contains a use-after-free vulnerability that allows for code execu | |
CVE-2017-3066 |
ColdFusion | — | — | 2025-02-24 | 2025-03-17 | Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS | |
CVE-2014-0502 |
Flash Player | — | — | 2024-09-17 | 2024-10-08 | Adobe Flash Player contains a double free vulnerability that allows a remote att | |
CVE-2013-0648 |
Flash Player | — | — | 2024-09-17 | 2024-10-08 | Adobe Flash Player contains an unspecified vulnerability in the ExternalInterfac | |
CVE-2013-0643 |
Flash Player | — | — | 2024-09-17 | 2024-10-08 | Adobe Flash Player contains an incorrect default permissions vulnerability in th | |
CVE-2014-0497 |
Flash Player | — | — | 2024-09-17 | 2024-10-08 | Adobe Flash Player contains an integer underflow vulnerability that allows a rem | |
CVE-2018-4990 |
Acrobat and Reader | — | — | 2022-06-08 | 2022-06-22 | Adobe Acrobat and Reader have a double free vulnerability that could lead to rem | |
CVE-2012-5054 |
Flash Player | — | — | 2022-06-08 | 2022-06-22 | Adobe Flash Player contains an integer overflow vulnerability that allows remote | |
CVE-2012-0767 |
Flash Player | — | — | 2022-06-08 | 2022-06-22 | Adobe Flash Player contains a XSS vulnerability that allows remote attackers to | |
CVE-2012-0754 |
Flash Player | — | — | 2022-06-08 | 2022-06-22 | Adobe Flash Player contains a memory corruption vulnerability that allows remote | |
CVE-2011-2462 |
Reader and Acrobat | — | — | 2022-06-08 | 2022-06-22 | The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory c | |
CVE-2011-0609 |
Flash Player | — | — | 2022-06-08 | 2022-06-22 | Adobe Flash Player contains an unspecified vulnerability that allows remote atta | |
CVE-2010-2883 |
Acrobat and Reader | — | — | 2022-06-08 | 2022-06-22 | Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability tha | |
CVE-2010-1297 |
Flash Player | — | — | 2022-06-08 | 2022-06-22 | Adobe Flash Player contains a memory corruption vulnerability that allows remote | |
CVE-2009-4324 |
Acrobat and Reader | — | — | 2022-06-08 | 2022-06-22 | Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers | |
CVE-2009-3953 |
Acrobat and Reader | — | — | 2022-06-08 | 2022-06-22 | Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) | |
CVE-2009-1862 |
Acrobat and Reader, Flash Player | — | — | 2022-06-08 | 2022-06-22 | Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execu | |
CVE-2008-0655 |
Acrobat and Reader | — | — | 2022-06-08 | 2022-06-22 | Adobe Acrobat and Reader contains an unespecified vulnerability described as a d | |
CVE-2007-5659 |
Acrobat and Reader | — | — | 2022-06-08 | 2022-06-22 | Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows rem | |
CVE-2016-1010 |
Flash Player and AIR | — | — | 2022-05-25 | 2022-06-15 | Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to | |
CVE-2016-0984 |
Flash Player and AIR | — | — | 2022-05-25 | 2022-06-15 | Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attacker | |
CVE-2015-0310 |
Flash Player | — | — | 2022-05-25 | 2022-06-15 | Adobe Flash Player does not properly restrict discovery of memory addresses, whi | |
CVE-2015-8651 |
Flash Player | — | — | 2022-05-25 | 2022-06-15 | Integer overflow in Adobe Flash Player allows attackers to execute code. | |
CVE-2014-8439 |
Flash Player | — | — | 2022-05-25 | 2022-06-15 | Adobe Flash Player has a vulnerability in the way it handles a dereferenced memo | |
CVE-2014-0546 |
Reader and Acrobat | — | — | 2022-05-25 | 2022-06-15 | Adobe Reader and Acrobat on Windows allow attackers to bypass a sandbox protecti | |
CVE-2018-5002 |
Flash Player | — | — | 2022-05-23 | 2022-06-13 | Adobe Flash Player have a stack-based buffer overflow vulnerability that could l | |
CVE-2015-5123 |
Flash Player | — | — | 2022-04-13 | 2022-05-04 | Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) | |
CVE-2015-5122 |
Flash Player | — | — | 2022-04-13 | 2022-05-04 | Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (A | |
CVE-2015-3113 |
Flash Player | — | — | 2022-04-13 | 2022-05-04 | Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote att | |
CVE-2015-0313 |
Flash Player | — | — | 2022-04-13 | 2022-05-04 | Use-after-free vulnerability in Adobe Flash Player allows remote attackers to ex | |
CVE-2015-0311 |
Flash Player | — | — | 2022-04-13 | 2022-05-04 | Unspecified vulnerability in Adobe Flash Player allows remote attackers to execu | |
CVE-2014-9163 |
Flash Player | — | — | 2022-04-13 | 2022-05-04 | Stack-based buffer overflow in Adobe Flash Player allows attackers to execute co | |
CVE-2013-2729 |
Reader and Acrobat | — | — | 2022-03-28 | 2022-04-18 | Integer overflow vulnerability in Adobe Reader and Acrobat allows attackers to e | |
CVE-2012-2034 |
Flash Player | — | — | 2022-03-28 | 2022-04-18 | Adobe Flash Player contains a memory corruption vulnerability that allows for re | |
CVE-2016-7892 |
Flash Player | — | — | 2022-03-25 | 2022-04-15 | Adobe Flash Player has an exploitable use-after-free vulnerability in the TextFi | |
CVE-2016-4171 |
Flash Player | — | — | 2022-03-25 | 2022-04-15 | Unspecified vulnerability in Adobe Flash Player allows for remote code execution | |
CVE-2010-2861 |
ColdFusion | — | — | 2022-03-25 | 2022-04-15 | RW | A directory traversal vulnerability exists in the administrator console in Adobe |
CVE-2009-0927 |
Reader and Acrobat | — | — | 2022-03-25 | 2022-04-15 | Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote atta | |
CVE-2013-0631 |
ColdFusion | — | — | 2022-03-07 | 2022-09-07 | Adobe Coldfusion contains an unspecified vulnerability, which could result in in | |
CVE-2013-0629 |
ColdFusion | — | — | 2022-03-07 | 2022-09-07 | Adobe Coldfusion contains a directory traversal vulnerability, which could permi | |
CVE-2013-0625 |
ColdFusion | — | — | 2022-03-07 | 2022-09-07 | Adobe Coldfusion contains an authentication bypass vulnerability, which could re | |
CVE-2009-3960 |
BlazeDS | — | — | 2022-03-07 | 2022-09-07 | RW | Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnera |
CVE-2017-11292 |
Flash Player | — | — | 2022-03-03 | 2022-03-24 | Adobe Flash Player contains a type confusion vulnerability which can allow for r | |
CVE-2016-7855 |
Flash Player | — | — | 2022-03-03 | 2022-03-24 | Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allo | |
CVE-2016-4117 |
Flash Player | — | — | 2022-03-03 | 2022-03-24 | RW | An access of resource using incompatible type vulnerability exists within Adobe |
CVE-2016-1019 |
Flash Player | — | — | 2022-03-03 | 2022-03-24 | RW | Adobe Flash Player allows remote attackers to cause a denial of service or possi |
CVE-2015-7645 |
Flash Player | — | — | 2022-03-03 | 2022-03-24 | RW | Adobe Flash Player allows remote attackers to execute arbitrary code via a craft |
CVE-2015-5119 |
Flash Player | — | — | 2022-03-03 | 2022-03-24 | A use-after-free vulnerability exists within the ActionScript 3 ByteArray class | |
CVE-2015-3043 |
Flash Player | — | — | 2022-03-03 | 2022-03-24 | A memory corruption vulnerability exists in Adobe Flash Player that allows an at | |
CVE-2014-0496 |
Reader and Acrobat | — | — | 2022-03-03 | 2022-03-24 | Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow | |
CVE-2013-3346 |
Reader and Acrobat | — | — | 2022-03-03 | 2022-03-24 | Adobe Reader and Acrobat contain a memory corruption vulnerability which can all | |
CVE-2013-0641 |
Reader | — | — | 2022-03-03 | 2022-03-24 | A buffer overflow vulnerability exists in Adobe Reader which allows an attacker | |
CVE-2013-0640 |
Reader and Acrobat | — | — | 2022-03-03 | 2022-03-24 | An memory corruption vulnerability exists in the acroform.dll in Adobe Reader th | |
CVE-2013-0632 |
ColdFusion | — | — | 2022-03-03 | 2022-03-24 | An authentication bypass vulnerability exists in Adobe ColdFusion which could re | |
CVE-2012-1535 |
Flash Player | — | — | 2022-03-03 | 2022-03-24 | Unspecified vulnerability in Adobe Flash Player allows remote attackers to execu | |
CVE-2011-0611 |
Flash Player | — | — | 2022-03-03 | 2022-03-24 | Adobe Flash Player contains a vulnerability that allows remote attackers to exec | |
CVE-2010-0188 |
Reader and Acrobat | — | — | 2022-03-03 | 2022-03-24 | RW | Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause |
CVE-2008-2992 |
Acrobat and Reader | — | — | 2022-03-03 | 2022-03-24 | RW | Adobe Acrobat and Reader contain an input validation issue in a JavaScript metho |
CVE-2022-24086 |
Commerce and Magento Open Source | — | — | 2022-02-15 | 2022-03-01 | Adobe Commerce and Magento Open Source contain an improper input validation vuln | |
CVE-2018-15982 |
Flash Player | — | — | 2022-02-15 | 2022-08-15 | RW | Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerabili |
CVE-2021-21017 |
Acrobat and Reader | — | — | 2021-11-03 | 2021-11-17 | Acrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability th | |
CVE-2021-28550 |
Acrobat and Reader | — | — | 2021-11-03 | 2021-11-17 | Adobe Acrobat and Reader contains a use-after-free vulnerability that could allo | |
CVE-2018-4939 |
ColdFusion | — | — | 2021-11-03 | 2022-05-03 | Adobe ColdFusion contains a deserialization of untrusted data vulnerability that | |
CVE-2018-15961 |
ColdFusion | — | — | 2021-11-03 | 2022-05-03 | Adobe ColdFusion contains an unrestricted file upload vulnerability that could a | |
CVE-2018-4878 |
Flash Player | — | — | 2021-11-03 | 2022-05-03 | RW | Adobe Flash Player contains a use-after-free vulnerability that could allow for |