Adobe known exploited vulnerabilities
Every Adobe CVE on CISA's Known Exploited Vulnerabilities catalog, newest addition first: 83 in all, 7 added in the last 12 months.
- CVE-2023-38203Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCEAdobe ColdFusion
- CVE-2023-29300Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code executionAdobe ColdFusion
- CVE-2010-2861Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to re
- CVE-2009-3960Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and
- CVE-2016-4117Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wil
- CVE-2016-1019Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbit
- CVE-2015-7645Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows rem
- CVE-2010-0188Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (a
- CVE-2008-2992Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file t
- CVE-2018-15982Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability.
- CVE-2018-4878A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161.Adobe Flash Player before
FAQ
Adobe KEV questions.
How many Adobe vulnerabilities are in CISA KEV?
83 Adobe vulnerabilities are on CISA's Known Exploited Vulnerabilities catalog, 7 of them added in the last 12 months. The newest is CVE-2026-48356 (Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability), added 2026-10-27.
Which Adobe products are in CISA KEV?
13 products, including Commerce and Magento, ColdFusion, Acrobat and Reader. Attackers have exploited every one of these entries in the wild, and US federal agencies must patch each by its CISA due date.
Are Adobe KEV vulnerabilities used by ransomware?
CISA knows ransomware campaigns exploit 11 of the 83 Adobe entries.