Adobe CVEs
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-30318InDesign Desktop | Out-of-bounds Write (CWE-787)
- CVE-2025-30319InDesign Desktop | NULL Pointer Dereference (CWE-476)
- CVE-2025-30310Dreamweaver Desktop | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)
- CVE-2025-27190Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2025-27191Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2025-27192Adobe Commerce | Insufficiently Protected Credentials (CWE-522)
- CVE-2025-27188Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2025-27189Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
- CVE-2025-30287ColdFusion | Improper Authentication (CWE-287)
- CVE-2025-30293ColdFusion | Improper Input Validation (CWE-20)
- CVE-2025-30292ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2025-30290ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2025-30282ColdFusion | Improper Authentication (CWE-287)
- CVE-2025-30284ColdFusion | Deserialization of Untrusted Data (CWE-502)
- CVE-2025-30294ColdFusion | Improper Input Validation (CWE-20)
- CVE-2025-30289ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
- CVE-2025-30288ColdFusion | Improper Access Control (CWE-284)
- CVE-2025-24446ColdFusion | Improper Input Validation (CWE-20)
- CVE-2025-24447ColdFusion | Deserialization of Untrusted Data (CWE-502)
- CVE-2025-30281ColdFusion | Improper Access Control (CWE-284)
- CVE-2025-30291ColdFusion | Information Exposure (CWE-200)
- CVE-2025-30285ColdFusion | Deserialization of Untrusted Data (CWE-502)
- CVE-2025-30286ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
- CVE-2025-30308XMPWorker | Out-of-bounds Read (CWE-125)
- CVE-2025-30307XMPWorker | Out-of-bounds Read (CWE-125)
- CVE-2025-30305XMPWorker | Out-of-bounds Read (CWE-125)
- CVE-2025-30306XMPWorker | Out-of-bounds Read (CWE-125)
- CVE-2025-30309XMPWorker | Out-of-bounds Read (CWE-125)
- CVE-2025-30300Adobe Framemaker | NULL Pointer Dereference (CWE-476)
- CVE-2025-30303Adobe Framemaker | Out-of-bounds Read (CWE-125)