Adobe CVEs
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-54235Substance3D - Modeler | Out-of-bounds Read (CWE-125)
- CVE-2025-54203Substance3D - Modeler | Out-of-bounds Read (CWE-125)
- CVE-2025-54200Substance3D - Modeler | Out-of-bounds Read (CWE-125)
- CVE-2025-54204Substance3D - Modeler | Out-of-bounds Read (CWE-125)
- CVE-2025-49571Substance3D - Modeler | Uncontrolled Search Path Element (CWE-427)
- CVE-2025-54202Substance3D - Modeler | Out-of-bounds Read (CWE-125)
- CVE-2025-54199Substance3D - Modeler | Out-of-bounds Read (CWE-125)
- CVE-2025-54201Substance3D - Modeler | Out-of-bounds Read (CWE-125)
- CVE-2025-54198Substance3D - Modeler | Out-of-bounds Read (CWE-125)
- CVE-2025-49570Photoshop Desktop | Out-of-bounds Write (CWE-787)
- CVE-2025-49562Animate | Use After Free (CWE-416)
- CVE-2025-49561Animate | Use After Free (CWE-416)
- CVE-2025-49569Substance3D - Viewer | Out-of-bounds Write (CWE-787)
- CVE-2025-49560Substance3D - Viewer | Heap-based Buffer Overflow (CWE-122)
- CVE-2025-49556Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2025-49557Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-49558Adobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
- CVE-2025-49554Adobe Commerce | Improper Input Validation (CWE-20)
- CVE-2025-49559Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2025-49555Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
- CVE-2025-49563Illustrator | Out-of-bounds Write (CWE-787)
- CVE-2025-49568Illustrator | Use After Free (CWE-416)
- CVE-2025-49564Illustrator | Stack-based Buffer Overflow (CWE-121)
- CVE-2025-49567Illustrator | NULL Pointer Dereference (CWE-476)
- CVE-2025-54253Adobe Experience Manager | Incorrect Authorization (CWE-863)
- CVE-2025-54254Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
- CVE-2025-46958Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-47001Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-46993Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-46996Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)