Adobe CVEs
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-24445Substance3D - Sampler | Out-of-bounds Write (CWE-787)
- CVE-2025-24442Substance3D - Sampler | Out-of-bounds Write (CWE-787)
- CVE-2025-24439Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)
- CVE-2025-24440Substance3D - Sampler | Out-of-bounds Write (CWE-787)
- CVE-2025-24451Substance3D - Painter | Out-of-bounds Write (CWE-787)
- CVE-2025-24450Substance3D - Painter | Out-of-bounds Write (CWE-787)
- CVE-2025-21169Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)
- CVE-2025-27172Substance3D - Designer | Out-of-bounds Write (CWE-787)
- CVE-2024-53974Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-24422Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2025-24414Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-24437Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2025-24434Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2025-24415Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-24411Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2025-24416Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-24420Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2025-24413Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-24419Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2025-24432Adobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
- CVE-2025-24424Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2025-24430Adobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
- CVE-2025-24429Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2025-24436Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2025-24407Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2025-24438Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-24423Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2025-24418Adobe Commerce | Improper Authorization (CWE-285)
- CVE-2025-24406Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2025-24417Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)