Adobe CVEs
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-24409Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2025-24425Adobe Commerce | Business Logic Errors (CWE-840)
- CVE-2025-24421Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2025-24412Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-24427Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2025-24426Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2025-24428Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-24410Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2025-24408Adobe Commerce | Information Exposure (CWE-200)
- CVE-2025-24435Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2025-21162Photoshop Elements | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)
- CVE-2025-21161Substance3D - Designer | Out-of-bounds Write (CWE-787)
- CVE-2025-21160Illustrator | Integer Underflow (Wrap or Wraparound) (CWE-191)
- CVE-2025-21163Illustrator | Stack-based Buffer Overflow (CWE-121)
- CVE-2025-21159Illustrator | Use After Free (CWE-416)
- CVE-2025-21156InCopy | Integer Underflow (Wrap or Wraparound) (CWE-191)
- CVE-2025-21155Substance3D - Stager | NULL Pointer Dereference (CWE-476)
- CVE-2025-21126InDesign Desktop | Improper Input Validation (CWE-20)
- CVE-2025-21158InDesign Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)
- CVE-2025-21125InDesign Desktop | NULL Pointer Dereference (CWE-476)
- CVE-2025-21123InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2025-21157InDesign Desktop | Out-of-bounds Write (CWE-787)
- CVE-2025-21121InDesign Desktop | Out-of-bounds Write (CWE-787)
- CVE-2025-21124InDesign Desktop | Out-of-bounds Read (CWE-125)
- CVE-2024-53962Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-53963Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2024-53966Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-53964Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-53965Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2025-21136Substance3D - Designer | Out-of-bounds Write (CWE-787)