[ Vendor · 281 CVEs ]

Adobe

CVEs affecting Adobe published in the last 30 days, plus any Adobe CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2024-34102 13 Jun 2024 CVSS 9.8 Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE)Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference… Exploited
CVE-2024-34102 13 Jun 2024 CVSS 9.8 Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE)Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference… Exploited
CVE-2024-20767 18 Mar 2024 CVSS 7.4 Adobe ColdFusion Improper Access ControlColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system… Exploited
CVE-2023-38205 14 Sep 2023 CVSS 7.5 Adobe ColdFusion Improper Access ControlAdobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control… Exploited
CVE-2023-26369 13 Sep 2023 CVSS 7.8 Adobe Acrobat and Reader Out-of-Bounds WriteAcrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write… Exploited
CVE-2023-38203 20 Jul 2023 CVSS 9.8 Adobe ColdFusion Deserialization of Untrusted DataAdobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data… ExploitedFix
CVE-2023-29298 12 Jul 2023 CVSS 7.5 Adobe ColdFusion Improper Access ControlAdobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Access Control… Exploited
CVE-2023-29300 12 Jul 2023 CVSS 9.8 Adobe ColdFusion Deserialization of Untrusted DataAdobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by a Deserialization of… Exploited
CVE-2023-26359 23 Mar 2023 CVSS 9.8 Adobe ColdFusion Deserialization of Untrusted DataAdobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by a Deserialization of Untrusted Data… ExploitedFix
CVE-2023-26360 23 Mar 2023 CVSS 8.6 Adobe ColdFusion Deserialization of Untrusted DataAdobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that… ExploitedFix
CVE-2023-21608 18 Jan 2023 CVSS 7.8 Adobe Acrobat and Reader Use-After-FreeAdobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free… Exploited
CVE-2022-24086 16 Feb 2022 CVSS 9.8 Adobe Commerce and Magento Open Source Improper Input ValidationAdobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the… ExploitedFix
CVE-2021-28550 2 Sep 2021 CVSS 8.8 Adobe Acrobat and Reader Use-After-FreeAcrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use… Exploited
CVE-2021-21017 11 Feb 2021 CVSS 8.8 Adobe Acrobat and Reader Heap-based Buffer OverflowAcrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a… Exploited
CVE-2020-9715 19 Aug 2020 CVSS 7.8 Adobe Acrobat Use-After-FreeAdobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an… ExploitedFix
CVE-2018-15982 18 Jan 2019 CVSS 7.8 Adobe Flash Player Use-After-FreeFlash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to… ExploitedFix
CVE-2018-15961 25 Sep 2018 CVSS 9.8 Adobe ColdFusion Unrestricted File UploadAdobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload… Exploited
CVE-2018-4990 9 Jul 2018 CVSS 8.8 Adobe Acrobat and Reader Double FreeAdobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free… Exploited
CVE-2018-5002 9 Jul 2018 CVSS 7.8 Adobe Flash Player Stack-based Buffer OverflowAdobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary… ExploitedFix
CVE-2018-4939 19 May 2018 CVSS 9.8 Adobe ColdFusion Deserialization of Untrusted DataAdobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data… Exploited
CVE-2018-4878 6 Feb 2018 CVSS 7.8 Adobe Flash Player Use-After-FreeA use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the… Exploited
CVE-2017-11292 22 Oct 2017 CVSS 8.8 Adobe Flash Player Type ConfusionAdobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the… ExploitedFix
CVE-2017-3066 27 Apr 2017 CVSS 9.8 Adobe ColdFusion DeserializationAdobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization… ExploitedFix
CVE-2016-7892 15 Dec 2016 CVSS 8.8 Adobe Flash Player Use-After-FreeAdobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class… ExploitedFix
CVE-2016-7855 1 Nov 2016 CVSS 8.8 Adobe Flash Player Use-After-FreeUse-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to… ExploitedFix
CVE-2016-4171 16 Jun 2016 CVSS 9.8 Adobe Flash Player Remote Code ExecutionUnspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as… Exploited
CVE-2016-4117 11 May 2016 CVSS 9.8 Adobe Flash Player Arbitrary Code ExecutionAdobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May… Exploited
CVE-2016-1019 7 Apr 2016 CVSS 9.8 Adobe Flash Player Arbitrary Code ExecutionAdobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code… ExploitedFix
CVE-2016-1010 12 Mar 2016 CVSS 8.8 Adobe Flash Player and AIR Integer OverflowInteger overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on… ExploitedFix
CVE-2016-0984 10 Feb 2016 CVSS 8.8 Adobe Flash Player and AIR Use-After-FreeUse-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569… ExploitedFix
CVE-2015-8651 28 Dec 2015 CVSS 8.8 Adobe Flash Player Integer OverflowInteger overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux… ExploitedFix
CVE-2015-7645 15 Oct 2015 CVSS 7.8 Adobe Flash Player Arbitrary Code ExecutionAdobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote… ExploitedFix
CVE-2015-5123 14 Jul 2015 CVSS 9.8 Adobe Flash Player Use-After-FreeUse-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on… Exploited
CVE-2015-5122 14 Jul 2015 CVSS 9.8 Adobe Flash Player Use-After-FreeUse-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on… Exploited
CVE-2015-5119 8 Jul 2015 CVSS 9.8 Adobe Flash Player Use-After-FreeUse-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x… ExploitedFix
CVE-2015-3113 23 Jun 2015 CVSS 9.8 Adobe Flash Player Heap-Based Buffer OverflowHeap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before… ExploitedFix
CVE-2015-3043 14 Apr 2015 CVSS 9.8 Adobe Flash Player Memory CorruptionAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to… ExploitedFix
CVE-2015-0313 2 Feb 2015 CVSS 9.8 Adobe Flash Player Use-After-FreeUse-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before… ExploitedFix
CVE-2015-0311 23 Jan 2015 CVSS 9.8 Adobe Flash Player Remote Code ExecutionUnspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through… ExploitedFix
CVE-2015-0310 23 Jan 2015 CVSS 7.8 Adobe Flash Player ASLR BypassAdobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly… ExploitedFix
CVE-2014-9163 10 Dec 2014 CVSS 7.8 Adobe Flash Player Stack-Based Buffer OverflowStack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425… Exploited
CVE-2014-8439 25 Nov 2014 CVSS 8.8 Adobe Flash Player Dereferenced PointerAdobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before… Exploited
CVE-2014-0546 12 Aug 2014 CVSS 9.8 Adobe Reader and Acrobat Sandbox BypassAdobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and… ExploitedFix
CVE-2014-0502 21 Feb 2014 CVSS 8.8 Adobe Flash Player Double Free VulnerablityDouble free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before… ExploitedFix
CVE-2014-0502 21 Feb 2014 CVSS 8.8 Adobe Flash Player Double Free VulnerablityDouble free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before… ExploitedFix
CVE-2014-0497 5 Feb 2014 CVSS 9.8 Adobe Flash Player Integer Underflow VulnerablityInteger underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before… ExploitedFix
CVE-2014-0497 5 Feb 2014 CVSS 9.8 Adobe Flash Player Integer Underflow VulnerablityInteger underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before… ExploitedFix
CVE-2014-0496 15 Jan 2014 CVSS 8.8 Adobe Reader and Acrobat Use-After-FreeUse-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to… Exploited
CVE-2013-3346 30 Aug 2013 CVSS 9.8 Adobe Reader and Acrobat Memory CorruptionAdobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of… Exploited
CVE-2013-2729 16 May 2013 CVSS 9.8 Adobe Reader and Acrobat Arbitrary Integer OverflowInteger overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code… ExploitedFix
CVE-2013-0643 27 Feb 2013 CVSS 8.8 Adobe Flash Player Incorrect Default PermissionsThe Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x… ExploitedFix
CVE-2013-0643 27 Feb 2013 CVSS 8.8 Adobe Flash Player Incorrect Default PermissionsThe Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x… ExploitedFix
CVE-2013-0648 27 Feb 2013 CVSS 8.8 Adobe Flash Player Code ExecutionUnspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171… ExploitedFix
CVE-2013-0640 14 Feb 2013 CVSS 7.8 Adobe Reader and Acrobat Memory CorruptionAdobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a… Exploited
CVE-2013-0641 14 Feb 2013 CVSS 7.8 Adobe Reader Buffer OverflowBuffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute… Exploited
CVE-2013-0632 17 Jan 2013 CVSS 9.8 Adobe ColdFusion Authentication Bypassadministrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code… Exploited
CVE-2013-0629 9 Jan 2013 CVSS 7.5 Adobe ColdFusion Directory TraversalAdobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified… Exploited
CVE-2013-0631 9 Jan 2013 CVSS 7.5 Adobe ColdFusion Information DisclosureAdobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January… Exploited
CVE-2013-0625 9 Jan 2013 CVSS 9.8 Adobe ColdFusion Authentication BypassAdobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly execute… Exploited
CVE-2012-5054 24 Sep 2012 CVSS 8.8 Adobe Flash Player Integer OverflowInteger overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute… Exploited
CVE-2012-1535 15 Aug 2012 CVSS 7.8 Adobe Flash Player Arbitrary Code ExecutionUnspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers… ExploitedFix
CVE-2012-2034 9 Jun 2012 CVSS 7.5 Adobe Flash Player Memory CorruptionAdobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux… Exploited
CVE-2012-0754 16 Feb 2012 CVSS 8.1 Adobe Flash Player Memory CorruptionAdobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x… ExploitedFix
CVE-2012-0767 16 Feb 2012 CVSS 6.1 Adobe Flash Player Cross-Site Scripting (XSS)Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and… ExploitedFix
CVE-2011-2462 7 Dec 2011 CVSS 9.8 Adobe Reader and Acrobat Universal 3D Memory CorruptionUnspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through… Exploited
CVE-2011-0611 13 Apr 2011 CVSS 8.8 Adobe Flash Player Remote Code ExecutionAdobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140… ExploitedFix
CVE-2011-0611 13 Apr 2011 CVSS 8.8 Adobe Flash Player Remote Code ExecutionAdobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140… ExploitedFix
CVE-2011-0609 15 Mar 2011 CVSS 7.8 Adobe Flash Player UnspecifiedUnspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android… Exploited
CVE-2010-2883 9 Sep 2010 CVSS 7.3 Adobe Acrobat and Reader Stack-Based Buffer OverflowStack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote… Exploited
CVE-2010-2861 11 Aug 2010 CVSS 9.8 Adobe ColdFusion Directory TraversalMultiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read… Exploited
CVE-2010-1297 8 Jun 2010 CVSS 7.8 Adobe Flash Player Memory CorruptionAdobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x… Exploited
CVE-2010-0188 22 Feb 2010 CVSS 7.8 Adobe Reader and Acrobat Arbitrary Code ExecutionUnspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service… Exploited
CVE-2009-3960 15 Feb 2010 CVSS 6.5 Adobe BlazeDS Information DisclosureUnspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex… Exploited
CVE-2009-3953 13 Jan 2010 CVSS 8.8 Adobe Acrobat and Reader Universal 3D Remote Code ExecutionThe U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote… ExploitedFix
CVE-2009-4324 15 Dec 2009 CVSS 7.8 Adobe Acrobat and Reader Use-After-FreeUse-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on… Exploited
CVE-2009-3459 13 Oct 2009 CVSS 8.8 Adobe Acrobat and Reader Heap-Based Buffer OverflowHeap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute… ExploitedFix
CVE-2009-1862 23 Jul 2009 CVSS 7.8 Adobe Acrobat and Reader, Flash Player UnspecifiedUnspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87… Exploited
CVE-2009-0927 19 Mar 2009 CVSS 8.8 Adobe Reader and Adobe Acrobat Stack-Based Buffer OverflowStack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute… ExploitedFix
CVE-2008-2992 4 Nov 2008 CVSS 7.8 Adobe Reader and Acrobat Input ValidationStack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls… ExploitedFix
CVE-2007-5659 12 Feb 2008 CVSS 7.8 Adobe Acrobat and Reader Buffer OverflowMultiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long… Exploited
CVE-2008-0655 7 Feb 2008 CVSS 8.8 Adobe Acrobat and Reader UnspecifiedMultiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors. ExploitedFix
Page 3 of 3