Adobe CVEs
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-34140Adobe Bridge PDF File Parsing Memory Corruption
- CVE-2024-34139Adobe Bridge has an integer overflow vulnerability when parsing SVG file
- CVE-2024-20781Adobe Indesign TIF File Parsing Heap Memory Corruption
- CVE-2024-20785Adobe Indesign 2024 TIFF File Parsing Memory Corruption Remote Code Execution vulnerability
- CVE-2024-20783Adobe Indesign 2024 RLE File Parsing Heap Memory Corruption
- CVE-2024-20782Adobe Indesign WMF File Parsing Out Of Bound Write
- CVE-2024-34123Adobe Premiere Pro arbitrary DLL loading lead to remote code execution
- CVE-2024-34122T5 Acrobat Vulnerability - Exploitable crash in DecodeTile
- CVE-2024-34142Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-34141Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2024-34130Acrobat Android : OverSecured Finding : Access to arbitrary* content providers via insecure Intent configuration
- CVE-2024-34129Acrobat Android : OverSecured Finding : Overwriting arbitrary files via attacker-controlled output file paths
- CVE-2024-34112ColdFusion CFDOCUMENT file retrieval / access control bypass
- CVE-2024-34113ColdFusion | Weak Cryptography for Passwords (CWE-261)
- CVE-2024-34116Adobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege Escalation
- CVE-2024-34115ZDI-CAN-24054: Adobe Substance 3D Stager SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-30300Tenable Vulnerability Disclosure | Sensitive Information Disclosure Via Fake FMPS Worker
- CVE-2024-30299Tenable Vulnerability Disclosure | API Auth Bypass
- CVE-2024-20753Adobe Photoshop PDF File Parsing Memory Corruption Remote Code Execution Vulnerability
- CVE-2024-30278Adobe Media Encoder 2024 TGA File parsing memory corruption
- CVE-2024-34106Insecure Direct Object Reference - An attacker can able to erase the victim quote details
- CVE-2024-34103Customer account takeover via web API call & subsequent password reset
- CVE-2024-34109Adobe Commerce | Improper Input Validation (CWE-20)
- CVE-2024-34110RCE in the Adobe Commerce Webhook module through a legit webhook definition
- CVE-2024-34111SSRF in service connector
- CVE-2024-34107Adobe Commerce | Improper Access Control (CWE-284)
- CVE-2024-34105Stored Cross Site Scripting in Order Comment
- CVE-2024-34104Adobe Commerce | Improper Authorization (CWE-285)
- CVE-2024-34102XXE can expose crypt key and other secrets granting full admin access
- CVE-2024-34108Large attack surface through legit webhook usage in Adobe Commerce