Skip to content
OpenAdvisories

Vendor

Adobe

5,219 known vulnerabilities.

Products

Adobe Experience Manager 928 Adobe Acrobat and Reader 516 Acrobat Reader 451 Adobe Experience Manager 6.5 261 Adobe Experience Manager 6.5 LTS 243 Adobe Experience Manager as a Cloud Service 227 Adobe Commerce 210 After Effects 136 Illustrator 135 InDesign Desktop 133 Dimension 116 Bridge 113 ColdFusion 110 Content Credentials Rust SDK 107 Animate 101 Experience Manager 98 ColdFusion 2025 96 ColdFusion 2023 96 Substance3D - Stager 87 Substance3D - Painter 86 Magento Commerce 85 Adobe Framemaker 82 Photoshop 82 Content Credentials JS SDK 81 Adobe Commerce B2B 75 Magento Open Source 75 Adobe Connect 72 InDesign 66 InCopy 65 Acrobat 2024 60 Audition 53 C2PA Tool 51 Media Encoder 51 Adobe Bridge 47 Adobe Campaign Classic 45 Substance3D - Modeler 43 Premiere 39 Adobe Photoshop CC 38 FrameMaker 35 Content Credentials Command-Line Tool 34
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 8.6
    CVE-2026-34621 Exploited Public exploit

    Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)

    Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the curre…

    Adobe Acrobat 2024 Acrobat Reader DC Acrobat DC
    KEV Apr 13, 2026
  • High 7.4
    CVE-2024-20767 Exploited Public exploit EPSS 99%

    ColdFusion | Improper Access Control (CWE-284)

    ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify restricted files. Exploitation of this …

    Adobe ColdFusion
    KEV Dec 16, 2024
  • High 7.5
    CVE-2023-38205 Exploited EPSS 100%

    ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298

    Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the…

    Adobe ColdFusion
    KEV Jul 20, 2023
  • High 7.8
    CVE-2023-26369 Exploited

    [Google Project Zero] Adobe Acrobat DC OOBW 0-day actively exploited in the wild

    Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o…

    Adobe Acrobat Reader
    KEV Sep 14, 2023
  • High 7.5
    CVE-2023-29298 Exploited EPSS 100%

    Adobe ColdFusion Improper Access Control Security feature bypass

    Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to a…

    Adobe ColdFusion
    KEV Jul 20, 2023
  • High 8.6
    CVE-2023-26360 Exploited Public exploit EPSS 97%

    Adobe ColdFusion Improper Access Control Arbitrary code execution

    Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does n…

    Adobe ColdFusion
    KEV Mar 15, 2023
  • High 7.8
    CVE-2023-21608 Exploited Public exploit EPSS 59%

    Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability

    Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o…

    Adobe Acrobat Reader
    KEV Oct 10, 2023
  • High 8.8
    CVE-2021-21017 Exploited Public exploit EPSS 86%

    Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution

    Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achiev…

    Adobe Acrobat Reader
    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-9715 Exploited Public exploit EPSS 33%

    Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.…

    Adobe Adobe Acrobat and Reader
    KEV Apr 13, 2026