Skip to content
OpenAdvisories

Vendor

Adobe

5,109 known vulnerabilities.

Products

Adobe Experience Manager 928 Adobe Acrobat and Reader 516 Acrobat Reader 451 Adobe Experience Manager 6.5 248 Adobe Experience Manager 6.5 LTS 235 Adobe Experience Manager as a Cloud Service 218 Adobe Commerce 210 Illustrator 135 InDesign Desktop 133 After Effects 119 Dimension 116 Bridge 113 ColdFusion 110 Animate 101 Experience Manager 98 ColdFusion 2025 96 ColdFusion 2023 96 Content Credentials Rust SDK 94 Substance3D - Stager 87 Substance3D - Painter 86 Magento Commerce 85 Adobe Framemaker 82 Content Credentials JS SDK 81 Adobe Commerce B2B 75 Magento Open Source 75 Photoshop 69 InDesign 66 InCopy 65 Acrobat 2024 60 Adobe Connect 48 Adobe Bridge 47 Adobe Campaign Classic 45 Media Encoder 45 Substance3D - Modeler 43 Audition 42 C2PA Tool 38 Adobe Photoshop CC 38 FrameMaker 35 Content Credentials Command-Line Tool 34 Adobe Acrobat 32
All Critical High Medium Low Exploited only Public exploit

48 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-103849 Public exploit

    Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

    Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the vict…

    Adobe Adobe Commerce Magento Open Source Adobe Commerce B2B Web / CMS
  • Critical 10.0
    CVE-2026-75650 Exploited Public exploit EPSS 99%

    Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

    Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbi…

    Adobe Adobe Commerce Magento Open Source Adobe Commerce B2B Web / CMS
    KEV Sep 8, 2026
  • Critical 9.1
    CVE-2026-71362 Exploited Public exploit EPSS 90%

    Adobe Commerce | Incorrect Authorization (CWE-863)

    Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user in…

    Adobe Adobe Commerce Magento Open Source Adobe Commerce B2B Web / CMS
    KEV Sep 24, 2026
  • Critical 9.3
    CVE-2026-48356 Exploited Public exploit EPSS 47%

    Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)

    Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or sessio…

    Adobe Adobe Commerce Adobe Commerce B2B Magento Open Source Web / CMS
    KEV Oct 27, 2026
  • Critical 10.0
    CVE-2026-48282 Exploited Public exploit EPSS 42%

    ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

    ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation of thi…

    Adobe ColdFusion 2023 ColdFusion 2025
    KEV Jul 7, 2026
  • High 8.6
    CVE-2026-34621 Exploited Public exploit

    Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)

    Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the curre…

    Adobe Acrobat 2024 Acrobat Reader DC Acrobat DC
    KEV Apr 13, 2026
  • High 7.8
    CVE-2026-27280 Public exploit

    DNG SDK | Out-of-bounds Write (CWE-787)

    DNG SDK versions 1.7.1 2471 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a ma…

    Adobe Adobe DNG Software Development Kit (SDK)
  • Critical 9.1
    CVE-2025-54236 Exploited Public exploit EPSS 95%

    Adobe Commerce | Improper Input Validation (CWE-20)

    Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality,…

    Adobe Adobe Commerce magento/community-edition magento/project-community-edition Packagist
    KEV Oct 24, 2025
  • Critical 10.0
    CVE-2025-54253 Exploited Public exploit EPSS 81%

    Adobe Experience Manager | Incorrect Authorization (CWE-863)

    Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. An attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of …

    Adobe Adobe Experience Manager
    KEV Oct 15, 2025
  • Medium 5.4
    CVE-2025-47029 Public exploit

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be execu…

    Adobe Adobe Experience Manager
  • Critical 9.1
    CVE-2025-43564 Public exploit EPSS 17%

    ColdFusion | Incorrect Authorization (CWE-863)

    ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data …

    Adobe ColdFusion
  • Critical 9.8
    CVE-2024-34102 Exploited Public exploit EPSS 100%

    XXE can expose crypt key and other secrets granting full admin access

    Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability …

    Adobe Adobe Commerce magento/community-edition Packagist
    KEV Jul 17, 2024
  • High 7.4
    CVE-2024-20767 Exploited Public exploit EPSS 99%

    ColdFusion | Improper Access Control (CWE-284)

    ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify restricted files. Exploitation of this …

    Adobe ColdFusion
    KEV Dec 16, 2024
  • High 8.6
    CVE-2023-26360 Exploited Public exploit EPSS 97%

    Adobe ColdFusion Improper Access Control Arbitrary code execution

    Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does n…

    Adobe ColdFusion
    KEV Mar 15, 2023
  • Medium 5.3
    CVE-2023-22232 Public exploit EPSS 83%

    Adobe Connect Improper Access Control Security feature bypass

    Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature…

    Adobe Connect
  • High 7.8
    CVE-2023-21608 Exploited Public exploit EPSS 59%

    Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability

    Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o…

    Adobe Acrobat Reader
    KEV Oct 10, 2023
  • Critical 10.0
    CVE-2022-35698 Public exploit EPSS 15%

    Adobe Commerce Stored XSS Arbitrary code execution

    Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.

    Adobe Magento Commerce magento/community-edition magento/project-community-edition Web / CMS Packagist
  • Critical 9.8
    CVE-2022-24086 Exploited Public exploit EPSS 99%

    Adobe Commerce checkout improper input validation leads to remote code execution

    Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code e…

    Adobe Magento Commerce magento/community-edition Web / CMS Packagist
    KEV Feb 15, 2022
  • Medium 5.5
    CVE-2021-45067 Public exploit

    Adobe Acrobat Reader Memory Corruption could lead to Information Disclosure

    Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Access of Memory Location After End of Buffer vulnerability that could lead to disclosure of sensitive memory. An attacker could…

    Adobe Acrobat Reader
  • High 7.8
    CVE-2021-40724 Public exploit

    Adobe Acrobat Reader Android Abritrary Code Execution Vulnerability

    Acrobat Reader for Android versions 21.8.0 (and earlier) are affected by a Path traversal vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this…

    Adobe Reader Mobile
  • High 7.8
    CVE-2021-39863 Public exploit EPSS 13%

    Adobe Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution

    Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this v…

    Adobe Acrobat Reader
  • High 7.8
    CVE-2021-21086 Public exploit

    Adobe Reader CoolType Arbitrary Stack Manipulation

    Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulne…

    Adobe Acrobat Reader
  • Critical 9.1
    CVE-2021-21014 Public exploit

    Magento Commerce Arbitrary Folder Empty Could Lead To Arbitrary Code Execution

    Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a file upload restriction bypass. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console i…

    Adobe Magento Commerce magento/community-edition magento/project-community-edition Web / CMS Packagist
  • Medium 6.5
    CVE-2021-21042 Public exploit EPSS 15%

    Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability

    Acrobat Reader DC versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Read vulnerability that could lead to arbitrary disclosure of information in the memory stack. An attacker …

    Adobe Acrobat Reader
  • High 8.8
    CVE-2021-21017 Exploited Public exploit EPSS 86%

    Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution

    Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achiev…

    Adobe Acrobat Reader
    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-9715 Exploited Public exploit EPSS 33%

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.…

    Adobe Adobe Acrobat and Reader
    KEV Apr 13, 2026
  • Unscored —
    CVE-2020-3766 Public exploit

    Adobe Genuine Integrity Service versions Version 6.4 and earlier have an insecure file permissions vulnerability. Succe…

    Adobe Adobe Genuine Integrity Service
  • Unscored —
    CVE-2019-16451 Public exploit EPSS 35%

    Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier …

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-8197 Public exploit EPSS 17%

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier,…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-8196 Public exploit EPSS 23%

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier,…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-8195 Public exploit EPSS 23%

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier,…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-8050 Public exploit EPSS 41%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-8049 Public exploit EPSS 20%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-8048 Public exploit EPSS 35%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-8046 Public exploit EPSS 18%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-8045 Public exploit EPSS 16%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-8044 Public exploit EPSS 14%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-8043 Public exploit EPSS 13%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-8042 Public exploit EPSS 17%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2019-8041 Public exploit EPSS 18%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2…

    Adobe Adobe Acrobat and Reader