Adobe CVEs
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-44359ZDI-CAN-21936: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-44366ZDI-CAN-21928: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-44340ZDI-CAN-21424: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-44338ZDI-CAN-21493: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2023-44361ZDI-CAN-22041: Adobe Acrobat Reader DC AcroForm Doc Object Use-After-Free Information Disclosure Vulnerability
- CVE-2023-44371ZDI-CAN-21998: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-44358ZDI-CAN-21971: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-44339ZDI-CAN-21422: Adobe Acrobat Reader DC AcroForm value Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-44336TALOS-2023-1794 - Adobe Acrobat Reader Thermometer use-after-free vulnerability
- CVE-2023-44365ZDI-CAN-21931: Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability
- CVE-2023-44367ZDI-CAN-21929: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-44337ZDI-CAN-21509: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2023-44372TALOS-2023-1842 - Adobe Acrobat Reader U3D page event use-after-free vulnerability
- CVE-2023-44323PDF Jbig2 memory-corruption Vulnerability - MSFT T5
- CVE-2023-38251Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)
- CVE-2023-38219Validate Your Inputs | Cross-site Scripting (Stored XSS) (CWE-79) - Customer to Admin stored XSS with Gift wrapping
- CVE-2023-38220Full page cache enumeration via cookie X-Magento-Vary
- CVE-2023-26367Error based file extraction via PHP filter chains during product bulk import logic
- CVE-2023-26366Validate Your Inputs | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2023-38218Incorrect Authorization - Customer account takeover
- CVE-2023-38250Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- CVE-2023-38249Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- CVE-2023-38221Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- CVE-2023-26370ZDI-CAN-21257: Adobe Photoshop PSD File Parsing Uninitialized Variable Remote Code Execution Vulnerability
- CVE-2023-38217ZDI-CAN-21403: Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-38216ZDI-CAN-21404: Adobe Bridge Font Parsing Use-After-Free Information Disclosure Vulnerability
- CVE-2023-38204Bypass APSB23-41 (CVE-2023-38203) - Pre-Auth RCE ColdFusion 2021 Update 8
- CVE-2023-38205ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298
- CVE-2023-38206ColdFusion | Improper Access Control (CWE-284)
- CVE-2023-38215Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)