Adobe
83 vulnerabilities in Adobe products that CISA lists as exploited.
| CVE | Vendor | Product | Name | Added | Fix due | Ransomware |
|---|---|---|---|---|---|---|
| CVE-2026-48356 | Adobe | Commerce and Magento | Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability | 27 Oct 2026 | 10 Nov 2026 | Unknown |
| CVE-2026-71362 | Adobe | Commerce and Magento | Adobe Commerce and Magento Incorrect Authorization Vulnerability | 24 Sep 2026 | 27 Sep 2026 | Unknown |
| CVE-2026-75650 | Adobe | Commerce and Magento | Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability | 8 Sep 2026 | 11 Sep 2026 | Unknown |
| CVE-2026-48282 | Adobe | ColdFusion | Adobe ColdFusion Path Traversal Vulnerability | 7 Jul 2026 | 10 Jul 2026 | Unknown |
| CVE-2009-3459 | Adobe | Acrobat and Reader | Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability | 20 May 2026 | 3 Jun 2026 | Unknown |
| CVE-2020-9715 | Adobe | Acrobat | Adobe Acrobat Use-After-Free Vulnerability | 13 Apr 2026 | 27 Apr 2026 | Unknown |
| CVE-2026-34621 | Adobe | Acrobat and Reader | Adobe Acrobat and Reader Prototype Pollution Vulnerability | 13 Apr 2026 | 27 Apr 2026 | Unknown |
| CVE-2025-54236 | Adobe | Commerce and Magento | Adobe Commerce and Magento Improper Input Validation Vulnerability | 24 Oct 2025 | 14 Nov 2025 | Unknown |
| CVE-2025-54253 | Adobe | Experience Manager (AEM) Forms | Adobe Experience Manager Forms Code Execution Vulnerability | 15 Oct 2025 | 5 Nov 2025 | Unknown |
| CVE-2017-3066 | Adobe | ColdFusion | Adobe ColdFusion Deserialization Vulnerability | 24 Feb 2025 | 17 Mar 2025 | Unknown |
| CVE-2024-20767 | Adobe | ColdFusion | Adobe ColdFusion Improper Access Control Vulnerability | 16 Dec 2024 | 6 Jan 2025 | Unknown |
| CVE-2013-0643 | Adobe | Flash Player | Adobe Flash Player Incorrect Default Permissions Vulnerability | 17 Sep 2024 | 8 Oct 2024 | Unknown |
| CVE-2013-0648 | Adobe | Flash Player | Adobe Flash Player Code Execution Vulnerability | 17 Sep 2024 | 8 Oct 2024 | Unknown |
| CVE-2014-0497 | Adobe | Flash Player | Adobe Flash Player Integer Underflow Vulnerablity | 17 Sep 2024 | 8 Oct 2024 | Unknown |
| CVE-2014-0502 | Adobe | Flash Player | Adobe Flash Player Double Free Vulnerablity | 17 Sep 2024 | 8 Oct 2024 | Unknown |
| CVE-2024-34102 | Adobe | Commerce and Magento Open Source | Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability | 17 Jul 2024 | 7 Aug 2024 | Unknown |
| CVE-2023-29300 | Adobe | ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 8 Jan 2024 | 29 Jan 2024 | Known |
| CVE-2023-38203 | Adobe | ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 8 Jan 2024 | 29 Jan 2024 | Known |
| CVE-2023-21608 | Adobe | Acrobat and Reader | Adobe Acrobat and Reader Use-After-Free Vulnerability | 10 Oct 2023 | 31 Oct 2023 | Unknown |
| CVE-2023-26369 | Adobe | Acrobat and Reader | Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability | 14 Sep 2023 | 5 Oct 2023 | Unknown |
| CVE-2023-26359 | Adobe | ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 21 Aug 2023 | 11 Sep 2023 | Unknown |
| CVE-2023-29298 | Adobe | ColdFusion | Adobe ColdFusion Improper Access Control Vulnerability | 20 Jul 2023 | 10 Aug 2023 | Unknown |
| CVE-2023-38205 | Adobe | ColdFusion | Adobe ColdFusion Improper Access Control Vulnerability | 20 Jul 2023 | 10 Aug 2023 | Unknown |
| CVE-2023-26360 | Adobe | ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 15 Mar 2023 | 5 Apr 2023 | Unknown |
| CVE-2007-5659 | Adobe | Acrobat and Reader | Adobe Acrobat and Reader Buffer Overflow Vulnerability | 8 Jun 2022 | 22 Jun 2022 | Unknown |
| CVE-2008-0655 | Adobe | Acrobat and Reader | Adobe Acrobat and Reader Unspecified Vulnerability | 8 Jun 2022 | 22 Jun 2022 | Unknown |
| CVE-2009-1862 | Adobe | Acrobat and Reader, Flash Player | Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability | 8 Jun 2022 | 22 Jun 2022 | Unknown |
| CVE-2009-3953 | Adobe | Acrobat and Reader | Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability | 8 Jun 2022 | 22 Jun 2022 | Unknown |
| CVE-2009-4324 | Adobe | Acrobat and Reader | Adobe Acrobat and Reader Use-After-Free Vulnerability | 8 Jun 2022 | 22 Jun 2022 | Unknown |
| CVE-2010-1297 | Adobe | Flash Player | Adobe Flash Player Memory Corruption Vulnerability | 8 Jun 2022 | 22 Jun 2022 | Unknown |
| CVE-2010-2883 | Adobe | Acrobat and Reader | Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability | 8 Jun 2022 | 22 Jun 2022 | Unknown |
| CVE-2011-0609 | Adobe | Flash Player | Adobe Flash Player Unspecified Vulnerability | 8 Jun 2022 | 22 Jun 2022 | Unknown |
| CVE-2011-2462 | Adobe | Reader and Acrobat | Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability | 8 Jun 2022 | 22 Jun 2022 | Unknown |
| CVE-2012-0754 | Adobe | Flash Player | Adobe Flash Player Memory Corruption Vulnerability | 8 Jun 2022 | 22 Jun 2022 | Unknown |
| CVE-2012-0767 | Adobe | Flash Player | Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability | 8 Jun 2022 | 22 Jun 2022 | Unknown |
| CVE-2012-5054 | Adobe | Flash Player | Adobe Flash Player Integer Overflow Vulnerability | 8 Jun 2022 | 22 Jun 2022 | Unknown |
| CVE-2018-4990 | Adobe | Acrobat and Reader | Adobe Acrobat and Reader Double Free Vulnerability | 8 Jun 2022 | 22 Jun 2022 | Unknown |
| CVE-2014-0546 | Adobe | Reader and Acrobat | Adobe Reader and Acrobat Sandbox Bypass Vulnerability | 25 May 2022 | 15 Jun 2022 | Unknown |
| CVE-2014-8439 | Adobe | Flash Player | Adobe Flash Player Dereferenced Pointer Vulnerability | 25 May 2022 | 15 Jun 2022 | Unknown |
| CVE-2015-0310 | Adobe | Flash Player | Adobe Flash Player ASLR Bypass Vulnerability | 25 May 2022 | 15 Jun 2022 | Unknown |
| CVE-2015-8651 | Adobe | Flash Player | Adobe Flash Player Integer Overflow Vulnerability | 25 May 2022 | 15 Jun 2022 | Unknown |
| CVE-2016-0984 | Adobe | Flash Player and AIR | Adobe Flash Player and AIR Use-After-Free Vulnerability | 25 May 2022 | 15 Jun 2022 | Unknown |
| CVE-2016-1010 | Adobe | Flash Player and AIR | Adobe Flash Player and AIR Integer Overflow Vulnerability | 25 May 2022 | 15 Jun 2022 | Unknown |
| CVE-2018-5002 | Adobe | Flash Player | Adobe Flash Player Stack-based Buffer Overflow Vulnerability | 23 May 2022 | 13 Jun 2022 | Unknown |
| CVE-2014-9163 | Adobe | Flash Player | Adobe Flash Player Stack-Based Buffer Overflow Vulnerability | 13 Apr 2022 | 4 May 2022 | Unknown |
| CVE-2015-0311 | Adobe | Flash Player | Adobe Flash Player Remote Code Execution Vulnerability | 13 Apr 2022 | 4 May 2022 | Unknown |
| CVE-2015-0313 | Adobe | Flash Player | Adobe Flash Player Use-After-Free Vulnerability | 13 Apr 2022 | 4 May 2022 | Unknown |
| CVE-2015-3113 | Adobe | Flash Player | Adobe Flash Player Heap-Based Buffer Overflow Vulnerability | 13 Apr 2022 | 4 May 2022 | Unknown |
| CVE-2015-5122 | Adobe | Flash Player | Adobe Flash Player Use-After-Free Vulnerability | 13 Apr 2022 | 4 May 2022 | Unknown |
| CVE-2015-5123 | Adobe | Flash Player | Adobe Flash Player Use-After-Free Vulnerability | 13 Apr 2022 | 4 May 2022 | Unknown |
| CVE-2012-2034 | Adobe | Flash Player | Adobe Flash Player Memory Corruption Vulnerability | 28 Mar 2022 | 18 Apr 2022 | Unknown |
| CVE-2013-2729 | Adobe | Reader and Acrobat | Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability | 28 Mar 2022 | 18 Apr 2022 | Unknown |
| CVE-2009-0927 | Adobe | Reader and Acrobat | Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability | 25 Mar 2022 | 15 Apr 2022 | Unknown |
| CVE-2010-2861 | Adobe | ColdFusion | Adobe ColdFusion Directory Traversal Vulnerability | 25 Mar 2022 | 15 Apr 2022 | Known |
| CVE-2016-4171 | Adobe | Flash Player | Adobe Flash Player Remote Code Execution Vulnerability | 25 Mar 2022 | 15 Apr 2022 | Unknown |
| CVE-2016-7892 | Adobe | Flash Player | Adobe Flash Player Use-After-Free Vulnerability | 25 Mar 2022 | 15 Apr 2022 | Unknown |
| CVE-2009-3960 | Adobe | BlazeDS | Adobe BlazeDS Information Disclosure Vulnerability | 7 Mar 2022 | 7 Sep 2022 | Known |
| CVE-2013-0625 | Adobe | ColdFusion | Adobe ColdFusion Authentication Bypass Vulnerability | 7 Mar 2022 | 7 Sep 2022 | Unknown |
| CVE-2013-0629 | Adobe | ColdFusion | Adobe ColdFusion Directory Traversal Vulnerability | 7 Mar 2022 | 7 Sep 2022 | Unknown |
| CVE-2013-0631 | Adobe | ColdFusion | Adobe ColdFusion Information Disclosure Vulnerability | 7 Mar 2022 | 7 Sep 2022 | Unknown |
| CVE-2008-2992 | Adobe | Acrobat and Reader | Adobe Reader and Acrobat Input Validation Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Known |
| CVE-2010-0188 | Adobe | Reader and Acrobat | Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Known |
| CVE-2011-0611 | Adobe | Flash Player | Adobe Flash Player Remote Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2012-1535 | Adobe | Flash Player | Adobe Flash Player Arbitrary Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2013-0632 | Adobe | ColdFusion | Adobe ColdFusion Authentication Bypass Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2013-0640 | Adobe | Reader and Acrobat | Adobe Reader and Acrobat Memory Corruption Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2013-0641 | Adobe | Reader | Adobe Reader Buffer Overflow Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2013-3346 | Adobe | Reader and Acrobat | Adobe Reader and Acrobat Memory Corruption Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2014-0496 | Adobe | Reader and Acrobat | Adobe Reader and Acrobat Use-After-Free Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2015-3043 | Adobe | Flash Player | Adobe Flash Player Memory Corruption Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2015-5119 | Adobe | Flash Player | Adobe Flash Player Use-After-Free Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2015-7645 | Adobe | Flash Player | Adobe Flash Player Arbitrary Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Known |
| CVE-2016-1019 | Adobe | Flash Player | Adobe Flash Player Arbitrary Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Known |
| CVE-2016-4117 | Adobe | Flash Player | Adobe Flash Player Arbitrary Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Known |
| CVE-2016-7855 | Adobe | Flash Player | Adobe Flash Player Use-After-Free Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-11292 | Adobe | Flash Player | Adobe Flash Player Type Confusion Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2018-15982 | Adobe | Flash Player | Adobe Flash Player Use-After-Free Vulnerability | 15 Feb 2022 | 15 Aug 2022 | Known |
| CVE-2022-24086 | Adobe | Commerce and Magento Open Source | Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability | 15 Feb 2022 | 1 Mar 2022 | Unknown |
| CVE-2018-15961 | Adobe | ColdFusion | Adobe ColdFusion Unrestricted File Upload Vulnerability | 3 Nov 2021 | 3 May 2022 | Unknown |
| CVE-2018-4878 | Adobe | Flash Player | Adobe Flash Player Use-After-Free Vulnerability | 3 Nov 2021 | 3 May 2022 | Known |
| CVE-2018-4939 | Adobe | ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 | 3 May 2022 | Unknown |
| CVE-2021-21017 | Adobe | Acrobat and Reader | Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-28550 | Adobe | Acrobat and Reader | Adobe Acrobat and Reader Use-After-Free Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |