Adobe CVEs
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-43575Acrobat Reader | Out-of-bounds Write (CWE-787)
- CVE-2025-43578Acrobat Reader | Out-of-bounds Read (CWE-125)
- CVE-2025-43574Acrobat Reader | Use After Free (CWE-416)
- CVE-2025-43576Acrobat Reader | Use After Free (CWE-416)
- CVE-2025-47107InCopy | Heap-based Buffer Overflow (CWE-122)
- CVE-2025-30327InCopy | Integer Overflow or Wraparound (CWE-190)
- CVE-2025-43581Substance3D - Sampler | Out-of-bounds Write (CWE-787)
- CVE-2025-43588Substance3D - Sampler | Out-of-bounds Write (CWE-787)
- CVE-2025-47108Substance3D - Painter | Out-of-bounds Write (CWE-787)
- CVE-2025-30321InDesign Desktop | NULL Pointer Dereference (CWE-476)
- CVE-2025-43589InDesign Desktop | Use After Free (CWE-416)
- CVE-2025-30317InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2025-43558InDesign Desktop | Out-of-bounds Write (CWE-787)
- CVE-2025-47105InDesign Desktop | Out-of-bounds Read (CWE-125)
- CVE-2025-47104InDesign Desktop | Out-of-bounds Read (CWE-125)
- CVE-2025-43593InDesign Desktop | Out-of-bounds Write (CWE-787)
- CVE-2025-47106InDesign Desktop | Use After Free (CWE-416)
- CVE-2025-43590InDesign Desktop | Out-of-bounds Write (CWE-787)
- CVE-2025-27206Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2025-43586Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2025-47110Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-27207Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2025-43585Adobe Commerce | Improper Authorization (CWE-285)
- CVE-2025-43565ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2025-43559ColdFusion | Improper Input Validation (CWE-20)
- CVE-2025-43562ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
- CVE-2025-43566ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2025-43564ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2025-43560ColdFusion | Improper Input Validation (CWE-20)
- CVE-2025-43563ColdFusion | Improper Access Control (CWE-284)