Adobe CVEs
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-39408Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
- CVE-2024-39417An unauthorized user can export the Shipping Report
- CVE-2024-39410Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
- CVE-2024-39407Adobe Commerce | Improper Authorization (CWE-285)
- CVE-2024-39398OTP 2FA can be bruteforced
- CVE-2024-39401Adobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
- CVE-2024-39397Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)
- CVE-2024-39409Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
- CVE-2024-39411Adobe Commerce | Improper Authorization (CWE-285)
- CVE-2024-39416Unauthorized user can export Orders Sale Report
- CVE-2024-39414Being able to import/export tax rates without proper privileges
- CVE-2024-39412Adobe Commerce | Improper Authorization (CWE-285)
- CVE-2024-39402Adobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
- CVE-2024-39406Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2024-39400DOM XSS through integrations can impact other admins
- CVE-2024-39404A user without Shop Policy Parameters section privilege can alter the shop policy parameters section
- CVE-2024-39415An unauthorized user can export the Tax Sales Report
- CVE-2024-39405Adobe Commerce | Improper Authorization (CWE-285)
- CVE-2024-41864Adobe Substance 3D Designer ICO Parsing Out-Of-Bounds Write Vulnerability
- CVE-2024-41862Adobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability II, when parsing PSD file
- CVE-2024-41861Adobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability I, when parsing PSD file
- CVE-2024-41860Adobe Substance 3D Sampler Memory Corruption Vulnerability I, when parsing PSD file
- CVE-2024-41863Adobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability III, when parsing DNG file
- CVE-2024-41858Adobe InCopy has an integer overflow vulnerability when parsing SVG file
- CVE-2024-39392Adobe Indesign 2024 EPS File Parsing Heap Memory Corruption Remote Code Execution Vulnerability
- CVE-2024-39396Adobe Indesign 2024 PCX File Parsing Out Of Bound Read
- CVE-2024-39379Acrobat for Edge | Out-of-bounds Read (CWE-125)
- CVE-2024-41836InDesign Desktop | NULL Pointer Dereference (CWE-476)
- CVE-2024-41839Adobe Experience Manager | Improper Input Validation (CWE-20)
- CVE-2024-34128Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)