Adobe CVEs
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-21299Substance3D - Modeler | Out-of-bounds Write (CWE-787)
- CVE-2026-21298Substance3D - Modeler | Out-of-bounds Write (CWE-787)
- CVE-2026-21300Substance3D - Modeler | NULL Pointer Dereference (CWE-476)
- CVE-2026-21303Substance3D - Modeler | Out-of-bounds Read (CWE-125)
- CVE-2026-21302Substance3D - Modeler | Out-of-bounds Read (CWE-125)
- CVE-2026-21308Substance3D - Designer | Out-of-bounds Read (CWE-125)
- CVE-2026-21307Substance3D - Designer | Out-of-bounds Write (CWE-787)
- CVE-2026-21306Substance3D - Sampler | Out-of-bounds Write (CWE-787)
- CVE-2026-21287Substance3D - Stager | Use After Free (CWE-416)
- CVE-2026-21305Substance3D - Painter | Out-of-bounds Write (CWE-787)
- CVE-2026-21283Bridge | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-21281InCopy | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-21280Illustrator | Untrusted Search Path (CWE-426)
- CVE-2026-21288Illustrator | NULL Pointer Dereference (CWE-476)
- CVE-2026-21277InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-21304InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-21275InDesign Desktop | Access of Uninitialized Pointer (CWE-824)
- CVE-2026-21278InDesign Desktop | Out-of-bounds Read (CWE-125)
- CVE-2026-21276InDesign Desktop | Access of Uninitialized Pointer (CWE-824)
- CVE-2026-21267Dreamweaver Desktop | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
- CVE-2026-21271Dreamweaver Desktop | Improper Input Validation (CWE-20)
- CVE-2026-21274Dreamweaver Desktop | Incorrect Authorization (CWE-863)
- CVE-2026-21272Dreamweaver Desktop | Improper Input Validation (CWE-20)
- CVE-2026-21268Dreamweaver Desktop | Improper Input Validation (CWE-20)
- CVE-2025-64622Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64582Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64547Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64833Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64613Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-64829Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)