Adobe Security Updates — July 2025
Tuesday, 8 July 2025
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Critical 3
- Critical 9.8 EPSS 52%
- Critical 9.6 EPSS 1.2%
- Critical 9.3
All vulnerabilities 65
Critical3 ShowHide
- Critical 9.8 EPSS 52%
- Critical 9.6 EPSS 1.2%
- Critical 9.3
High38 ShowHide
- High 8.8
-
High 7.9
CVE-2025-49537 ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)EPSS 2.5%
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.8
- High 7.4 EPSS 2.4%
- High 7.3
Medium23 ShowHide
- Medium 6.8
- Medium 6.2
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.4
- Medium 5.4
- Medium 5.2 EPSS 1.3%
- Medium 4.5
- Medium 4.3
- Medium 4.3
- Medium 4.3
Low1 ShowHide
- Low 2.4