Adobe vulnerabilities
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-95638Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-96523Photoshop Desktop | Out-of-bounds Write (CWE-787)
- CVE-2026-104346Photoshop Desktop | Out-of-bounds Write (CWE-787)
- CVE-2026-95637Photoshop Desktop | Out-of-bounds Write (CWE-787)
- CVE-2026-97312Photoshop Desktop | Out-of-bounds Write (CWE-787)
- CVE-2026-95639Photoshop Desktop | Incorrect Authorization (CWE-863)
- CVE-2026-100111Photoshop Desktop | Out-of-bounds Write (CWE-787)
- CVE-2026-104347Photoshop Desktop | Out-of-bounds Write (CWE-787)
- CVE-2026-95636Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)
- CVE-2026-104348Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-100112Photoshop Desktop | Out-of-bounds Write (CWE-787)
- CVE-2026-95640Photoshop Desktop | NULL Pointer Dereference (CWE-476)
- CVE-2026-105896Photoshop Desktop | NULL Pointer Dereference (CWE-476)
- CVE-2026-95641Photoshop Desktop | Out-of-bounds Write (CWE-787)
- CVE-2026-105897ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-106616ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
- CVE-2026-34633ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-106618ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-105994ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-106622ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-106619ColdFusion | Improper Input Validation (CWE-20)
- CVE-2026-106089ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-106613ColdFusion | Improper Input Validation (CWE-20)
- CVE-2026-106614ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-106624ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- CVE-2026-75996ColdFusion | Uncontrolled Resource Consumption (CWE-400)
- CVE-2026-106621ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- CVE-2026-90530ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-105898ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-105903ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)