Adobe CVEs
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-54250Adobe Experience Manager | Improper Input Validation (CWE-20)
- CVE-2025-54247Adobe Experience Manager | Improper Input Validation (CWE-20)
- CVE-2025-54246Adobe Experience Manager | Incorrect Authorization (CWE-863)
- CVE-2025-54248Adobe Experience Manager | Improper Input Validation (CWE-20)
- CVE-2025-54251Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)
- CVE-2025-54252Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-54249Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2025-54236Adobe Commerce | Improper Input Validation (CWE-20)
- CVE-2025-47054Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2025-46849Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-46852Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-46856Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2025-46932Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-46936Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-46962Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-46998Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-54234ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2025-54238Dimension | Out-of-bounds Read (CWE-125)
- CVE-2025-54233Adobe Framemaker | Out-of-bounds Read (CWE-125)
- CVE-2025-54230Adobe Framemaker | Use After Free (CWE-416)
- CVE-2025-54232Adobe Framemaker | Use After Free (CWE-416)
- CVE-2025-54231Adobe Framemaker | Use After Free (CWE-416)
- CVE-2025-54229Adobe Framemaker | Use After Free (CWE-416)
- CVE-2025-54222Substance3D - Stager | Out-of-bounds Write (CWE-787)
- CVE-2025-54216InCopy | Out-of-bounds Write (CWE-787)
- CVE-2025-54217InCopy | Heap-based Buffer Overflow (CWE-122)
- CVE-2025-54215InCopy | Out-of-bounds Write (CWE-787)
- CVE-2025-54218InCopy | Out-of-bounds Write (CWE-787)
- CVE-2025-54223InCopy | Use After Free (CWE-416)
- CVE-2025-54219InCopy | Heap-based Buffer Overflow (CWE-122)