Adobe Security Updates — February 2025
Tuesday, 11 February 2025
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Critical 1
- Critical 9.1 EPSS 17%
All vulnerabilities 45
Critical1 ShowHide
- Critical 9.1 EPSS 17%
High22 ShowHide
- High 8.7
- High 8.7
- High 8.7
- High 8.7
- High 8.7
- High 8.7
- High 8.7
- High 8.7
- High 8.2
- High 8.1
- High 8.1
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
-
High 7.5
CVE-2025-24406 Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 1.4%
- High 7.1
Medium19 ShowHide
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.4
- Medium 5.4
- Medium 5.3
- Medium 4.3
- Medium 4.3
- Medium 4.3
- Medium 4.3
- Medium 4.3
- Medium 4.3