Adobe
Adobe known exploited vulnerabilities
Every Adobe vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first. 11 of them are known to be used by ransomware.
82 CVEs
- CVE-2026-71362Adobe Commerce and Magento Incorrect Authorization Vulnerability · added September 24, 2026
- CVE-2026-75650Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability · added September 8, 2026
- CVE-2026-48282Adobe ColdFusion Path Traversal Vulnerability · added July 7, 2026
- CVE-2009-3459Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability · added May 20, 2026
- CVE-2026-34621Adobe Acrobat and Reader Prototype Pollution Vulnerability · added April 13, 2026
- CVE-2020-9715Adobe Acrobat Use-After-Free Vulnerability · added April 13, 2026
- CVE-2025-54236Adobe Commerce and Magento Improper Input Validation Vulnerability · added October 24, 2025
- CVE-2025-54253Adobe Experience Manager Forms Code Execution Vulnerability · added October 15, 2025
- CVE-2017-3066Adobe ColdFusion Deserialization Vulnerability · added February 24, 2025
- CVE-2024-20767Adobe ColdFusion Improper Access Control Vulnerability · added December 16, 2024
- CVE-2014-0502Adobe Flash Player Double Free Vulnerablity · added September 17, 2024
- CVE-2014-0497Adobe Flash Player Integer Underflow Vulnerablity · added September 17, 2024
- CVE-2013-0648Adobe Flash Player Code Execution Vulnerability · added September 17, 2024
- CVE-2013-0643Adobe Flash Player Incorrect Default Permissions Vulnerability · added September 17, 2024
- CVE-2024-34102Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability · added July 17, 2024
- CVE-2023-38203 ransomwareAdobe ColdFusion Deserialization of Untrusted Data Vulnerability · added January 8, 2024
- CVE-2023-29300 ransomwareAdobe ColdFusion Deserialization of Untrusted Data Vulnerability · added January 8, 2024
- CVE-2023-21608Adobe Acrobat and Reader Use-After-Free Vulnerability · added October 10, 2023
- CVE-2023-26369Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability · added September 14, 2023
- CVE-2023-26359Adobe ColdFusion Deserialization of Untrusted Data Vulnerability · added August 21, 2023
- CVE-2023-38205Adobe ColdFusion Improper Access Control Vulnerability · added July 20, 2023
- CVE-2023-29298Adobe ColdFusion Improper Access Control Vulnerability · added July 20, 2023
- CVE-2023-26360Adobe ColdFusion Deserialization of Untrusted Data Vulnerability · added March 15, 2023
- CVE-2018-4990Adobe Acrobat and Reader Double Free Vulnerability · added June 8, 2022
- CVE-2012-5054Adobe Flash Player Integer Overflow Vulnerability · added June 8, 2022
- CVE-2012-0767Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability · added June 8, 2022
- CVE-2012-0754Adobe Flash Player Memory Corruption Vulnerability · added June 8, 2022
- CVE-2011-2462Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability · added June 8, 2022
- CVE-2011-0609Adobe Flash Player Unspecified Vulnerability · added June 8, 2022
- CVE-2010-2883Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability · added June 8, 2022
- CVE-2010-1297Adobe Flash Player Memory Corruption Vulnerability · added June 8, 2022
- CVE-2009-4324Adobe Acrobat and Reader Use-After-Free Vulnerability · added June 8, 2022
- CVE-2009-3953Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability · added June 8, 2022
- CVE-2009-1862Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability · added June 8, 2022
- CVE-2008-0655Adobe Acrobat and Reader Unspecified Vulnerability · added June 8, 2022
- CVE-2007-5659Adobe Acrobat and Reader Buffer Overflow Vulnerability · added June 8, 2022
- CVE-2016-1010Adobe Flash Player and AIR Integer Overflow Vulnerability · added May 25, 2022
- CVE-2016-0984Adobe Flash Player and AIR Use-After-Free Vulnerability · added May 25, 2022
- CVE-2015-8651Adobe Flash Player Integer Overflow Vulnerability · added May 25, 2022
- CVE-2015-0310Adobe Flash Player ASLR Bypass Vulnerability · added May 25, 2022
- CVE-2014-8439Adobe Flash Player Dereferenced Pointer Vulnerability · added May 25, 2022
- CVE-2014-0546Adobe Reader and Acrobat Sandbox Bypass Vulnerability · added May 25, 2022
- CVE-2018-5002Adobe Flash Player Stack-based Buffer Overflow Vulnerability · added May 23, 2022
- CVE-2015-5123Adobe Flash Player Use-After-Free Vulnerability · added April 13, 2022
- CVE-2015-5122Adobe Flash Player Use-After-Free Vulnerability · added April 13, 2022
- CVE-2015-3113Adobe Flash Player Heap-Based Buffer Overflow Vulnerability · added April 13, 2022
- CVE-2015-0313Adobe Flash Player Use-After-Free Vulnerability · added April 13, 2022
- CVE-2015-0311Adobe Flash Player Remote Code Execution Vulnerability · added April 13, 2022
- CVE-2014-9163Adobe Flash Player Stack-Based Buffer Overflow Vulnerability · added April 13, 2022
- CVE-2013-2729Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability · added March 28, 2022
- CVE-2012-2034Adobe Flash Player Memory Corruption Vulnerability · added March 28, 2022
- CVE-2016-7892Adobe Flash Player Use-After-Free Vulnerability · added March 25, 2022
- CVE-2016-4171Adobe Flash Player Remote Code Execution Vulnerability · added March 25, 2022
- CVE-2010-2861 ransomwareAdobe ColdFusion Directory Traversal Vulnerability · added March 25, 2022
- CVE-2009-0927Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability · added March 25, 2022
- CVE-2013-0631Adobe ColdFusion Information Disclosure Vulnerability · added March 7, 2022
- CVE-2013-0629Adobe ColdFusion Directory Traversal Vulnerability · added March 7, 2022
- CVE-2013-0625Adobe ColdFusion Authentication Bypass Vulnerability · added March 7, 2022
- CVE-2009-3960 ransomwareAdobe BlazeDS Information Disclosure Vulnerability · added March 7, 2022
- CVE-2017-11292Adobe Flash Player Type Confusion Vulnerability · added March 3, 2022
- CVE-2016-7855Adobe Flash Player Use-After-Free Vulnerability · added March 3, 2022
- CVE-2016-4117 ransomwareAdobe Flash Player Arbitrary Code Execution Vulnerability · added March 3, 2022
- CVE-2016-1019 ransomwareAdobe Flash Player Arbitrary Code Execution Vulnerability · added March 3, 2022
- CVE-2015-7645 ransomwareAdobe Flash Player Arbitrary Code Execution Vulnerability · added March 3, 2022
- CVE-2015-5119Adobe Flash Player Use-After-Free Vulnerability · added March 3, 2022
- CVE-2015-3043Adobe Flash Player Memory Corruption Vulnerability · added March 3, 2022
- CVE-2014-0496Adobe Reader and Acrobat Use-After-Free Vulnerability · added March 3, 2022
- CVE-2013-3346Adobe Reader and Acrobat Memory Corruption Vulnerability · added March 3, 2022
- CVE-2013-0641Adobe Reader Buffer Overflow Vulnerability · added March 3, 2022
- CVE-2013-0640Adobe Reader and Acrobat Memory Corruption Vulnerability · added March 3, 2022
- CVE-2013-0632Adobe ColdFusion Authentication Bypass Vulnerability · added March 3, 2022
- CVE-2012-1535Adobe Flash Player Arbitrary Code Execution Vulnerability · added March 3, 2022
- CVE-2011-0611Adobe Flash Player Remote Code Execution Vulnerability · added March 3, 2022
- CVE-2010-0188 ransomwareAdobe Reader and Acrobat Arbitrary Code Execution Vulnerability · added March 3, 2022
- CVE-2008-2992 ransomwareAdobe Reader and Acrobat Input Validation Vulnerability · added March 3, 2022
- CVE-2022-24086Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability · added February 15, 2022
- CVE-2018-15982 ransomwareAdobe Flash Player Use-After-Free Vulnerability · added February 15, 2022
- CVE-2021-28550Adobe Acrobat and Reader Use-After-Free Vulnerability · added November 3, 2021
- CVE-2021-21017Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability · added November 3, 2021
- CVE-2018-15961Adobe ColdFusion Unrestricted File Upload Vulnerability · added November 3, 2021
- CVE-2018-4939Adobe ColdFusion Deserialization of Untrusted Data Vulnerability · added November 3, 2021
- CVE-2018-4878 ransomwareAdobe Flash Player Use-After-Free Vulnerability · added November 3, 2021
Source: CISA Known Exploited Vulnerabilities Catalog (public domain).