adobe known exploited vulnerabilities

CISA's Known Exploited Vulnerabilities catalog lists 83 adobe vulnerabilities: 7 added in the last 365 days, 32 rated critical (CVSS 9 or higher), and 11 with known ransomware use. The most recent was added Oct 27, 2026.

RSS feed for adobe exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant

Added to KEV	CVE	Vulnerability	CVSS	EPSS	Federal due date	Ransomware use
2026-10-27	CVE-2026-48356	Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability	9.3 (v3.1)	30.6%	2026-11-10	Unknown
2026-09-24	CVE-2026-71362	Adobe Commerce and Magento Incorrect Authorization Vulnerability	9.1 (v3.1)	90.5%	2026-09-27	Unknown
2026-09-08	CVE-2026-75650	Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability	10 (v3.1)	3.9%	2026-09-11	Unknown
2026-07-07	CVE-2026-48282	Adobe ColdFusion Path Traversal Vulnerability	10 (v3.1)	42.4%	2026-07-10	Unknown
2026-05-20	CVE-2009-3459	Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability	8.8 (v3.1)	86.6%	2026-06-03	Unknown
2026-04-13	CVE-2020-9715	Adobe Acrobat Use-After-Free Vulnerability	7.8 (v3.1)	33.5%	2026-04-27	Unknown
2026-04-13	CVE-2026-34621	Adobe Acrobat and Reader Prototype Pollution Vulnerability	8.6 (v3.1)	7.2%	2026-04-27	Unknown
2025-10-24	CVE-2025-54236	Adobe Commerce and Magento Improper Input Validation Vulnerability	9.1 (v3.1)	94.7%	2025-11-14	Unknown
2025-10-15	CVE-2025-54253	Adobe Experience Manager Forms Code Execution Vulnerability	10 (v3.1)	88.8%	2025-11-05	Unknown
2025-02-24	CVE-2017-3066	Adobe ColdFusion Deserialization Vulnerability	9.8 (v3.1)	90.6%	2025-03-17	Unknown
2024-12-16	CVE-2024-20767	Adobe ColdFusion Improper Access Control Vulnerability	7.4 (v3.1)	98.5%	2025-01-06	Unknown
2024-09-17	CVE-2013-0643	Adobe Flash Player Incorrect Default Permissions Vulnerability	8.8 (v3.1)	10.5%	2024-10-08	Unknown
2024-09-17	CVE-2013-0648	Adobe Flash Player Code Execution Vulnerability	8.8 (v3.1)	11.1%	2024-10-08	Unknown
2024-09-17	CVE-2014-0497	Adobe Flash Player Integer Underflow Vulnerablity	8.8 (v3.1)	99.9%	2024-10-08	Unknown
2024-09-17	CVE-2014-0502	Adobe Flash Player Double Free Vulnerablity	8.8 (v3.1)	24.8%	2024-10-08	Unknown
2024-07-17	CVE-2024-34102	Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability	9.8 (v3.1)	>99.9%	2024-08-07	Unknown
2024-01-08	CVE-2023-29300	Adobe ColdFusion Deserialization of Untrusted Data Vulnerability	9.8 (v3.1)	>99.9%	2024-01-29	Known
2024-01-08	CVE-2023-38203	Adobe ColdFusion Deserialization of Untrusted Data Vulnerability	9.8 (v3.1)	97.1%	2024-01-29	Known
2023-10-10	CVE-2023-21608	Adobe Acrobat and Reader Use-After-Free Vulnerability	7.8 (v3.1)	59.4%	2023-10-31	Unknown
2023-09-14	CVE-2023-26369	Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability	7.8 (v3.1)	6.7%	2023-10-05	Unknown
2023-08-21	CVE-2023-26359	Adobe ColdFusion Deserialization of Untrusted Data Vulnerability	9.8 (v3.1)	17.0%	2023-09-11	Unknown
2023-07-20	CVE-2023-29298	Adobe ColdFusion Improper Access Control Vulnerability	7.5 (v3.1)	99.8%	2023-08-10	Unknown
2023-07-20	CVE-2023-38205	Adobe ColdFusion Improper Access Control Vulnerability	7.5 (v3.1)	99.8%	2023-08-10	Unknown
2023-03-15	CVE-2023-26360	Adobe ColdFusion Deserialization of Untrusted Data Vulnerability	8.6 (v3.1)	97.3%	2023-04-05	Unknown
2022-06-08	CVE-2007-5659	Adobe Acrobat and Reader Buffer Overflow Vulnerability	7.8 (v3.1)	87.4%	2022-06-22	Unknown
2022-06-08	CVE-2008-0655	Adobe Acrobat and Reader Unspecified Vulnerability	8.8 (v3.1)	37.9%	2022-06-22	Unknown
2022-06-08	CVE-2009-1862	Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability	7.8 (v3.1)	21.2%	2022-06-22	Unknown
2022-06-08	CVE-2009-3953	Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability	8.8 (v3.1)	83.2%	2022-06-22	Unknown
2022-06-08	CVE-2009-4324	Adobe Acrobat and Reader Use-After-Free Vulnerability	7.8 (v3.1)	81.9%	2022-06-22	Unknown
2022-06-08	CVE-2010-1297	Adobe Flash Player Memory Corruption Vulnerability	7.8 (v3.1)	82.5%	2022-06-22	Unknown
2022-06-08	CVE-2010-2883	Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability	7.3 (v3.1)	81.4%	2022-06-22	Unknown
2022-06-08	CVE-2011-0609	Adobe Flash Player Unspecified Vulnerability	7.8 (v3.1)	63.5%	2022-06-22	Unknown
2022-06-08	CVE-2011-2462	Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability	9.8 (v3.1)	88.6%	2022-06-22	Unknown
2022-06-08	CVE-2012-0754	Adobe Flash Player Memory Corruption Vulnerability	8.1 (v3.1)	91.1%	2022-06-22	Unknown
2022-06-08	CVE-2012-0767	Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability	6.1 (v3.1)	6.2%	2022-06-22	Unknown
2022-06-08	CVE-2012-5054	Adobe Flash Player Integer Overflow Vulnerability	8.8 (v3.1)	21.2%	2022-06-22	Unknown
2022-06-08	CVE-2018-4990	Adobe Acrobat and Reader Double Free Vulnerability	8.8 (v3.1)	35.9%	2022-06-22	Unknown
2022-05-25	CVE-2014-0546	Adobe Reader and Acrobat Sandbox Bypass Vulnerability	9.8 (v3.1)	22.3%	2022-06-15	Unknown
2022-05-25	CVE-2014-8439	Adobe Flash Player Dereferenced Pointer Vulnerability	8.8 (v3.1)	20.4%	2022-06-15	Unknown
2022-05-25	CVE-2015-0310	Adobe Flash Player ASLR Bypass Vulnerability	7.8 (v3.1)	15.1%	2022-06-15	Unknown
2022-05-25	CVE-2015-8651	Adobe Flash Player Integer Overflow Vulnerability	8.8 (v3.1)	67.7%	2022-06-15	Unknown
2022-05-25	CVE-2016-0984	Adobe Flash Player and AIR Use-After-Free Vulnerability	8.8 (v3.1)	54.5%	2022-06-15	Unknown
2022-05-25	CVE-2016-1010	Adobe Flash Player and AIR Integer Overflow Vulnerability	8.8 (v3.1)	19.3%	2022-06-15	Unknown
2022-05-23	CVE-2018-5002	Adobe Flash Player Stack-based Buffer Overflow Vulnerability	7.8 (v3.1)	25.1%	2022-06-13	Unknown
2022-04-13	CVE-2014-9163	Adobe Flash Player Stack-Based Buffer Overflow Vulnerability	7.8 (v3.1)	44.9%	2022-05-04	Unknown
2022-04-13	CVE-2015-0311	Adobe Flash Player Remote Code Execution Vulnerability	9.8 (v3.1)	85.6%	2022-05-04	Unknown
2022-04-13	CVE-2015-0313	Adobe Flash Player Use-After-Free Vulnerability	9.8 (v3.1)	95.3%	2022-05-04	Unknown
2022-04-13	CVE-2015-3113	Adobe Flash Player Heap-Based Buffer Overflow Vulnerability	9.8 (v3.1)	99.8%	2022-05-04	Unknown
2022-04-13	CVE-2015-5122	Adobe Flash Player Use-After-Free Vulnerability	9.8 (v3.1)	87.0%	2022-05-04	Unknown
2022-04-13	CVE-2015-5123	Adobe Flash Player Use-After-Free Vulnerability	9.8 (v3.1)	18.8%	2022-05-04	Unknown
2022-03-28	CVE-2012-2034	Adobe Flash Player Memory Corruption Vulnerability	7.5 (v3.1)	7.7%	2022-04-18	Unknown
2022-03-28	CVE-2013-2729	Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability	9.8 (v3.1)	66.6%	2022-04-18	Unknown
2022-03-25	CVE-2009-0927	Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability	8.8 (v3.1)	96.6%	2022-04-15	Unknown
2022-03-25	CVE-2010-2861	Adobe ColdFusion Directory Traversal Vulnerability	9.8 (v3.1)	99.7%	2022-04-15	Known
2022-03-25	CVE-2016-4171	Adobe Flash Player Remote Code Execution Vulnerability	9.8 (v3.1)	20.1%	2022-04-15	Unknown
2022-03-25	CVE-2016-7892	Adobe Flash Player Use-After-Free Vulnerability	8.8 (v3.1)	18.8%	2022-04-15	Unknown
2022-03-07	CVE-2009-3960	Adobe BlazeDS Information Disclosure Vulnerability	6.5 (v3.1)	90.1%	2022-09-07	Known
2022-03-07	CVE-2013-0625	Adobe ColdFusion Authentication Bypass Vulnerability	9.8 (v3.1)	93.8%	2022-09-07	Unknown
2022-03-07	CVE-2013-0629	Adobe ColdFusion Directory Traversal Vulnerability	7.5 (v3.1)	65.8%	2022-09-07	Unknown
2022-03-07	CVE-2013-0631	Adobe ColdFusion Information Disclosure Vulnerability	7.5 (v3.1)	66.4%	2022-09-07	Unknown
2022-03-03	CVE-2008-2992	Adobe Reader and Acrobat Input Validation Vulnerability	7.8 (v3.1)	99.8%	2022-03-24	Known
2022-03-03	CVE-2010-0188	Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability	7.8 (v3.1)	88.2%	2022-03-24	Known
2022-03-03	CVE-2011-0611	Adobe Flash Player Remote Code Execution Vulnerability	8.8 (v3.1)	99.4%	2022-03-24	Unknown
2022-03-03	CVE-2012-1535	Adobe Flash Player Arbitrary Code Execution Vulnerability	7.8 (v3.1)	70.4%	2022-03-24	Unknown
2022-03-03	CVE-2013-0632	Adobe ColdFusion Authentication Bypass Vulnerability	9.8 (v3.1)	93.1%	2022-03-24	Unknown
2022-03-03	CVE-2013-0640	Adobe Reader and Acrobat Memory Corruption Vulnerability	7.8 (v3.1)	86.9%	2022-03-24	Unknown
2022-03-03	CVE-2013-0641	Adobe Reader Buffer Overflow Vulnerability	7.8 (v3.1)	32.3%	2022-03-24	Unknown
2022-03-03	CVE-2013-3346	Adobe Reader and Acrobat Memory Corruption Vulnerability	9.8 (v3.1)	78.9%	2022-03-24	Unknown
2022-03-03	CVE-2014-0496	Adobe Reader and Acrobat Use-After-Free Vulnerability	8.8 (v3.1)	40.0%	2022-03-24	Unknown
2022-03-03	CVE-2015-3043	Adobe Flash Player Memory Corruption Vulnerability	9.8 (v3.1)	73.9%	2022-03-24	Unknown
2022-03-03	CVE-2015-5119	Adobe Flash Player Use-After-Free Vulnerability	9.8 (v3.1)	98.6%	2022-03-24	Unknown
2022-03-03	CVE-2015-7645	Adobe Flash Player Arbitrary Code Execution Vulnerability	7.8 (v3.1)	65.3%	2022-03-24	Known
2022-03-03	CVE-2016-1019	Adobe Flash Player Arbitrary Code Execution Vulnerability	9.8 (v3.1)	22.3%	2022-03-24	Known
2022-03-03	CVE-2016-4117	Adobe Flash Player Arbitrary Code Execution Vulnerability	9.8 (v3.1)	94.4%	2022-03-24	Known
2022-03-03	CVE-2016-7855	Adobe Flash Player Use-After-Free Vulnerability	8.8 (v3.1)	25.2%	2022-03-24	Unknown
2022-03-03	CVE-2017-11292	Adobe Flash Player Type Confusion Vulnerability	8.8 (v3.1)	11.9%	2022-03-24	Unknown
2022-02-15	CVE-2018-15982	Adobe Flash Player Use-After-Free Vulnerability	7.8 (v3.1)	89.6%	2022-08-15	Known
2022-02-15	CVE-2022-24086	Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability	9.8 (v3.1)	99.2%	2022-03-01	Unknown
2021-11-03	CVE-2018-15961	Adobe ColdFusion Unrestricted File Upload Vulnerability	9.8 (v3.1)	>99.9%	2022-05-03	Unknown
2021-11-03	CVE-2018-4878	Adobe Flash Player Use-After-Free Vulnerability	7.8 (v3.1)	90.3%	2022-05-03	Known
2021-11-03	CVE-2018-4939	Adobe ColdFusion Deserialization of Untrusted Data Vulnerability	9.8 (v3.1)	62.0%	2022-05-03	Unknown
2021-11-03	CVE-2021-21017	Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability	8.8 (v3.1)	86.3%	2021-11-17	Unknown
2021-11-03	CVE-2021-28550	Adobe Acrobat and Reader Use-After-Free Vulnerability	9.6 (v3.0)	51.9%	2021-11-17	Unknown