Adobe CVEs
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-61819Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2025-61818InCopy | Use After Free (CWE-416)
- CVE-2025-61816InCopy | Heap-based Buffer Overflow (CWE-122)
- CVE-2025-61817InCopy | Use After Free (CWE-416)
- CVE-2025-61815InDesign Desktop | Use After Free (CWE-416)
- CVE-2025-61814InDesign Desktop | Use After Free (CWE-416)
- CVE-2025-61824InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2025-61832InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2025-54271Creative Cloud Desktop | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
- CVE-2025-54268Bridge | Heap-based Buffer Overflow (CWE-122)
- CVE-2025-54278Bridge | Heap-based Buffer Overflow (CWE-122)
- CVE-2025-61804Animate | Heap-based Buffer Overflow (CWE-122)
- CVE-2025-54279Animate | Use After Free (CWE-416)
- CVE-2025-54269Animate | Out-of-bounds Read (CWE-125)
- CVE-2025-54270Animate | NULL Pointer Dereference (CWE-476)
- CVE-2025-49552Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2025-49553Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2025-54196Adobe Connect | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)
- CVE-2025-61797Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-54272Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-61796Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-54267Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2025-54266Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-54263Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2025-54265Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2025-54264Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-61803Substance3D - Stager | Integer Overflow or Wraparound (CWE-190)
- CVE-2025-61802Substance3D - Stager | Use After Free (CWE-416)
- CVE-2025-61805Substance3D - Stager | Out-of-bounds Read (CWE-125)
- CVE-2025-61807Substance3D - Stager | Integer Overflow or Wraparound (CWE-190)