Skip to content
THREATWIRE

CVE Tracker · Vendor

Adobe CVEs

87 CVEs in the tracker, 82 in the CISA KEV catalogue.

All vendors · RSS feed for Adobe · Tracker data last updated 18 Oct 2026.

Showing 50 of 87

  1. CVE-2026-89276CVSS 9.9 criticalEPSS 0.53%2026-09-22

    campaign. Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vuln…

  2. CVE-2026-83964CVSS 7.5 highEPSS 0.22%2026-09-22

    connect. Adobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to disclosure o…

  3. CVE-2026-83660CVSS 10.0 criticalEPSS 0.34%2026-09-22

    campaign. Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could res…

  4. CVE-2026-82443CVSS 9.9 criticalEPSS 0.35%2026-09-22

    campaign. Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could res…

  5. CVE-2026-82009CVSS 9.1 criticalEPSS 0.99%2026-09-22

    campaign. Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Com…

  6. CVE-2026-75650CVSS 10.0 criticalEPSS 3.95%KEV2026-09-07

    Commerce and Magento. Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

  7. CVE-2026-71362CVSS 9.1 criticalEPSS 87.5%KEV2026-08-11

    Commerce and Magento . Adobe Commerce and Magento Incorrect Authorization Vulnerability

  8. CVE-2024-34102CVSS 9.8 criticalEPSS 100%KEV2024-06-13

    Commerce and Magento Open Source. Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability

  9. CVE-2024-20767CVSS 7.4 highEPSS 98.5%KEV2024-03-18

    ColdFusion. Adobe ColdFusion Improper Access Control Vulnerability

  10. CVE-2023-38205CVSS 7.5 highEPSS 100%KEV2023-09-14

    ColdFusion. Adobe ColdFusion Improper Access Control Vulnerability

  11. CVE-2023-29300CVSS 9.8 criticalEPSS 100%KEV2023-07-12

    ColdFusion. Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

  12. CVE-2023-29298CVSS 7.5 highEPSS 100%KEV2023-07-12

    ColdFusion. Adobe ColdFusion Improper Access Control Vulnerability

  13. CVE-2022-24086CVSS 9.8 criticalEPSS 99.2%KEV2022-02-16

    Commerce and Magento Open Source. Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability

  14. CVE-2018-15961CVSS 9.8 criticalEPSS 100%KEV2018-09-25

    ColdFusion. Adobe ColdFusion Unrestricted File Upload Vulnerability

  15. CVE-2015-5119CVSS 9.8 criticalEPSS 99.3%KEV2015-07-08

    Flash Player. Adobe Flash Player Use-After-Free Vulnerability

  16. CVE-2015-3113CVSS 9.8 criticalEPSS 100%KEV2015-06-23

    Flash Player. Adobe Flash Player Heap-Based Buffer Overflow Vulnerability

  17. CVE-2026-48282No CVSSEPSS 42.4%KEV

    ColdFusion. Adobe ColdFusion Path Traversal Vulnerability

  18. CVE-2026-34621No CVSSEPSS 2.18%KEV

    Acrobat and Reader. Adobe Acrobat and Reader Prototype Pollution Vulnerability

  19. CVE-2025-54253No CVSSEPSS 88.3%KEV

    Experience Manager (AEM) Forms. Adobe Experience Manager Forms Code Execution Vulnerability

  20. CVE-2025-54236No CVSSEPSS 94.3%KEV

    Commerce and Magento. Adobe Commerce and Magento Improper Input Validation Vulnerability

  21. CVE-2023-38203No CVSSEPSS 97.1%KEV

    ColdFusion. Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

  22. CVE-2023-26369No CVSSEPSS 6.75%KEV

    Acrobat and Reader. Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability

  23. CVE-2023-26360No CVSSEPSS 97.3%KEV

    ColdFusion. Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

  24. CVE-2023-26359No CVSSEPSS 17.0%KEV

    ColdFusion. Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

  25. CVE-2023-21608No CVSSEPSS 59.6%KEV

    Acrobat and Reader. Adobe Acrobat and Reader Use-After-Free Vulnerability

  26. CVE-2021-28550No CVSSEPSS 51.9%KEV

    Acrobat and Reader. Adobe Acrobat and Reader Use-After-Free Vulnerability

  27. CVE-2021-21017No CVSSEPSS 86.3%KEV

    Acrobat and Reader. Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability

  28. CVE-2020-9715No CVSSEPSS 48.6%KEV

    Acrobat. Adobe Acrobat Use-After-Free Vulnerability

  29. CVE-2018-5002No CVSSEPSS 25.1%KEV

    Flash Player. Adobe Flash Player Stack-based Buffer Overflow Vulnerability

  30. CVE-2018-4990No CVSSEPSS 36.2%KEV

    Acrobat and Reader. Adobe Acrobat and Reader Double Free Vulnerability

  31. CVE-2018-4939No CVSSEPSS 62.0%KEV

    ColdFusion. Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

  32. CVE-2018-4878No CVSSEPSS 89.5%KEV

    Flash Player. Adobe Flash Player Use-After-Free Vulnerability

  33. CVE-2018-15982No CVSSEPSS 89.6%KEV

    Flash Player. Adobe Flash Player Use-After-Free Vulnerability

  34. CVE-2017-3066No CVSSEPSS 90.6%KEV

    ColdFusion. Adobe ColdFusion Deserialization Vulnerability

  35. CVE-2017-11292No CVSSEPSS 11.9%KEV

    Flash Player. Adobe Flash Player Type Confusion Vulnerability

  36. CVE-2016-7892No CVSSEPSS 18.8%KEV

    Flash Player. Adobe Flash Player Use-After-Free Vulnerability

  37. CVE-2016-7855No CVSSEPSS 25.2%KEV

    Flash Player. Adobe Flash Player Use-After-Free Vulnerability

  38. CVE-2016-4171No CVSSEPSS 20.1%KEV

    Flash Player. Adobe Flash Player Remote Code Execution Vulnerability

  39. CVE-2016-4117No CVSSEPSS 94.4%KEV

    Flash Player. Adobe Flash Player Arbitrary Code Execution Vulnerability

  40. CVE-2016-1019No CVSSEPSS 22.3%KEV

    Flash Player. Adobe Flash Player Arbitrary Code Execution Vulnerability

  41. CVE-2016-1010No CVSSEPSS 19.3%KEV

    Flash Player and AIR. Adobe Flash Player and AIR Integer Overflow Vulnerability

  42. CVE-2016-0984No CVSSEPSS 54.5%KEV

    Flash Player and AIR. Adobe Flash Player and AIR Use-After-Free Vulnerability

  43. CVE-2015-8651No CVSSEPSS 67.7%KEV

    Flash Player. Adobe Flash Player Integer Overflow Vulnerability

  44. CVE-2015-7645No CVSSEPSS 65.3%KEV

    Flash Player. Adobe Flash Player Arbitrary Code Execution Vulnerability

  45. CVE-2015-5123No CVSSEPSS 18.8%KEV

    Flash Player. Adobe Flash Player Use-After-Free Vulnerability

  46. CVE-2015-5122No CVSSEPSS 93.9%KEV

    Flash Player. Adobe Flash Player Use-After-Free Vulnerability

  47. CVE-2015-3043No CVSSEPSS 73.9%KEV

    Flash Player. Adobe Flash Player Memory Corruption Vulnerability

  48. CVE-2015-0313No CVSSEPSS 95.3%KEV

    Flash Player. Adobe Flash Player Use-After-Free Vulnerability

  49. CVE-2015-0311No CVSSEPSS 85.6%KEV

    Flash Player. Adobe Flash Player Remote Code Execution Vulnerability

  50. CVE-2015-0310No CVSSEPSS 15.1%KEV

    Flash Player. Adobe Flash Player ASLR Bypass Vulnerability