Skip to content
OpenAdvisories

Vendor

Adobe

5,219 known vulnerabilities.

Products

Adobe Experience Manager 928 Adobe Acrobat and Reader 516 Acrobat Reader 451 Adobe Experience Manager 6.5 261 Adobe Experience Manager 6.5 LTS 243 Adobe Experience Manager as a Cloud Service 227 Adobe Commerce 210 After Effects 136 Illustrator 135 InDesign Desktop 133 Dimension 116 Bridge 113 ColdFusion 110 Content Credentials Rust SDK 107 Animate 101 Experience Manager 98 ColdFusion 2025 96 ColdFusion 2023 96 Substance3D - Stager 87 Substance3D - Painter 86 Magento Commerce 85 Adobe Framemaker 82 Photoshop 82 Content Credentials JS SDK 81 Adobe Commerce B2B 75 Magento Open Source 75 Adobe Connect 72 InDesign 66 InCopy 65 Acrobat 2024 60 Audition 53 C2PA Tool 51 Media Encoder 51 Adobe Bridge 47 Adobe Campaign Classic 45 Substance3D - Modeler 43 Premiere 39 Adobe Photoshop CC 38 FrameMaker 35 Content Credentials Command-Line Tool 34
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-103849 Public exploit

    Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

    Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the vict…

    Adobe Adobe Commerce Magento Open Source Adobe Commerce B2B Web / CMS
  • Critical 10.0
    CVE-2026-75650 Exploited Public exploit EPSS 99%

    Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

    Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbi…

    Adobe Adobe Commerce Magento Open Source Adobe Commerce B2B Web / CMS
    KEV Sep 8, 2026
  • Critical 9.1
    CVE-2026-71362 Exploited Public exploit EPSS 92%

    Adobe Commerce | Incorrect Authorization (CWE-863)

    Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user in…

    Adobe Adobe Commerce Magento Open Source Adobe Commerce B2B Web / CMS
    KEV Sep 24, 2026
  • Critical 9.3
    CVE-2026-48356 Exploited Public exploit EPSS 47%

    Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)

    Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or sessio…

    Adobe Adobe Commerce Adobe Commerce B2B Magento Open Source Web / CMS
    KEV Oct 27, 2026
  • Critical 10.0
    CVE-2026-48282 Exploited Public exploit EPSS 42%

    ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

    ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation of thi…

    Adobe ColdFusion 2023 ColdFusion 2025
    KEV Jul 7, 2026
  • Critical 9.1
    CVE-2025-54236 Exploited Public exploit EPSS 96%

    Adobe Commerce | Improper Input Validation (CWE-20)

    Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality,…

    Adobe Adobe Commerce magento/community-edition magento/project-community-edition Packagist
    KEV Oct 24, 2025
  • Critical 10.0
    CVE-2025-54253 Exploited Public exploit EPSS 81%

    Adobe Experience Manager | Incorrect Authorization (CWE-863)

    Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. An attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of …

    Adobe Adobe Experience Manager
    KEV Oct 15, 2025
  • Critical 9.1
    CVE-2025-43564 Public exploit EPSS 17%

    ColdFusion | Incorrect Authorization (CWE-863)

    ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data …

    Adobe ColdFusion
  • Critical 9.8
    CVE-2024-34102 Exploited Public exploit EPSS 100%

    XXE can expose crypt key and other secrets granting full admin access

    Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability …

    Adobe Adobe Commerce magento/community-edition Packagist
    KEV Jul 17, 2024
  • Critical 10.0
    CVE-2022-35698 Public exploit EPSS 15%

    Adobe Commerce Stored XSS Arbitrary code execution

    Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.

    Adobe Magento Commerce magento/community-edition magento/project-community-edition Web / CMS Packagist
  • Critical 9.8
    CVE-2022-24086 Exploited Public exploit EPSS 99%

    Adobe Commerce checkout improper input validation leads to remote code execution

    Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code e…

    Adobe Magento Commerce magento/community-edition Web / CMS Packagist
    KEV Feb 15, 2022
  • Critical 9.1
    CVE-2021-21014 Public exploit

    Magento Commerce Arbitrary Folder Empty Could Lead To Arbitrary Code Execution

    Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a file upload restriction bypass. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console i…

    Adobe Magento Commerce magento/community-edition magento/project-community-edition Web / CMS Packagist
  • Critical 9.8
    CVE-2018-15961 Exploited Public exploit EPSS 100%

    Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an un…

    Adobe ColdFusion
    KEV Nov 3, 2021