Adobe vulnerabilities
5,219 CVEs and advisories name Adobe as an affected vendor, 22 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-75650Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
- CVE-2026-71362Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2026-48356Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)
- CVE-2026-48282ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-34621Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)
- CVE-2025-54236Adobe Commerce | Improper Input Validation (CWE-20)
- CVE-2025-54253Adobe Experience Manager | Incorrect Authorization (CWE-863)
- CVE-2024-34102XXE can expose crypt key and other secrets granting full admin access
- CVE-2024-20767ColdFusion | Improper Access Control (CWE-284)
- CVE-2023-38205ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298
- CVE-2023-26369[Google Project Zero] Adobe Acrobat DC OOBW 0-day actively exploited in the wild
- CVE-2023-38203Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE
- CVE-2023-29300Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution
- CVE-2023-29298Adobe ColdFusion Improper Access Control Security feature bypass
- CVE-2023-26360Adobe ColdFusion Improper Access Control Arbitrary code execution
- CVE-2023-26359Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution
- CVE-2023-21608Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability
- CVE-2022-24086Adobe Commerce checkout improper input validation leads to remote code execution
- CVE-2021-28550Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution
- CVE-2021-21017Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution
- CVE-2020-9715Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav
- CVE-2018-15961Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file uploa