Skip to content
OpenAdvisories

Vendor

Adobe

5,219 known vulnerabilities.

Products

Adobe Experience Manager 928 Adobe Acrobat and Reader 516 Acrobat Reader 451 Adobe Experience Manager 6.5 261 Adobe Experience Manager 6.5 LTS 243 Adobe Experience Manager as a Cloud Service 227 Adobe Commerce 210 After Effects 136 Illustrator 135 InDesign Desktop 133 Dimension 116 Bridge 113 ColdFusion 110 Content Credentials Rust SDK 107 Animate 101 Experience Manager 98 ColdFusion 2025 96 ColdFusion 2023 96 Substance3D - Stager 87 Substance3D - Painter 86 Magento Commerce 85 Adobe Framemaker 82 Photoshop 82 Content Credentials JS SDK 81 Adobe Commerce B2B 75 Magento Open Source 75 Adobe Connect 72 InDesign 66 InCopy 65 Acrobat 2024 60 Audition 53 C2PA Tool 51 Media Encoder 51 Adobe Bridge 47 Adobe Campaign Classic 45 Substance3D - Modeler 43 Premiere 39 Adobe Photoshop CC 38 FrameMaker 35 Content Credentials Command-Line Tool 34
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 8.6
    CVE-2026-34621 Exploited Public exploit

    Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)

    Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the curre…

    Adobe Acrobat 2024 Acrobat Reader DC Acrobat DC
    KEV Apr 13, 2026
  • High 7.8
    CVE-2026-27280 Public exploit

    DNG SDK | Out-of-bounds Write (CWE-787)

    DNG SDK versions 1.7.1 2471 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a ma…

    Adobe Adobe DNG Software Development Kit (SDK)
  • High 7.4
    CVE-2024-20767 Exploited Public exploit EPSS 99%

    ColdFusion | Improper Access Control (CWE-284)

    ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify restricted files. Exploitation of this …

    Adobe ColdFusion
    KEV Dec 16, 2024
  • High 8.6
    CVE-2023-26360 Exploited Public exploit EPSS 97%

    Adobe ColdFusion Improper Access Control Arbitrary code execution

    Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does n…

    Adobe ColdFusion
    KEV Mar 15, 2023
  • High 7.8
    CVE-2023-21608 Exploited Public exploit EPSS 59%

    Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability

    Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o…

    Adobe Acrobat Reader
    KEV Oct 10, 2023
  • High 7.8
    CVE-2021-40724 Public exploit

    Adobe Acrobat Reader Android Abritrary Code Execution Vulnerability

    Acrobat Reader for Android versions 21.8.0 (and earlier) are affected by a Path traversal vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this…

    Adobe Reader Mobile
  • High 7.8
    CVE-2021-39863 Public exploit EPSS 13%

    Adobe Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution

    Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this v…

    Adobe Acrobat Reader
  • High 7.8
    CVE-2021-21086 Public exploit

    Adobe Reader CoolType Arbitrary Stack Manipulation

    Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulne…

    Adobe Acrobat Reader
  • High 8.8
    CVE-2021-21017 Exploited Public exploit EPSS 86%

    Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution

    Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achiev…

    Adobe Acrobat Reader
    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-9715 Exploited Public exploit EPSS 33%

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.…

    Adobe Adobe Acrobat and Reader
    KEV Apr 13, 2026