Adobe CVEs
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-30313Illustrator | Out-of-bounds Read (CWE-125)
- CVE-2025-43591InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2025-43592InDesign Desktop | Access of Uninitialized Pointer (CWE-824)
- CVE-2025-43594InDesign Desktop | Out-of-bounds Write (CWE-787)
- CVE-2025-47134InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2025-47136InDesign Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)
- CVE-2025-47103InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2025-49547Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-49534Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-49533Adobe Experience Manager (MS) | Deserialization of Untrusted Data (CWE-502)
- CVE-2025-27203Adobe Connect | Deserialization of Untrusted Data (CWE-502)
- CVE-2025-27165Substance3D - Stager | Out-of-bounds Read (CWE-125)
- CVE-2025-43584Substance3D - Viewer | Out-of-bounds Read (CWE-125)
- CVE-2025-43583Substance3D - Viewer | NULL Pointer Dereference (CWE-476)
- CVE-2025-43582Substance3D - Viewer | Heap-based Buffer Overflow (CWE-122)
- CVE-2025-49542ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2025-49535ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
- CVE-2025-49536ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2025-49539ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
- CVE-2025-49545ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2025-49541ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-49537ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
- CVE-2025-49551ColdFusion | Use of Hard-coded Credentials (CWE-798)
- CVE-2025-49546ColdFusion | Improper Access Control (CWE-284)
- CVE-2025-49544ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
- CVE-2025-49543ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-49540ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-49538ColdFusion | XML Injection (aka Blind XPath Injection) (CWE-91)
- CVE-2025-30312Dimension | Out-of-bounds Write (CWE-787)
- CVE-2025-47135Dimension | Out-of-bounds Read (CWE-125)