Vulnerabilità sfruttate

Adobe

83 vulnerabilità di Adobe nel catalogo KEV della CISA: quelle per cui l'agenzia statunitense per la sicurezza informatica ha prove di sfruttamento in attacchi reali.

Nel catalogo83
Ultimi 12 mesi7
In campagne ransomware11
Ultima aggiunta27 ottobre 2026

Le vulnerabilità83

  1. 27 ottobre 2026CVE-2026-48356Commerce and MagentoAdobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
  2. 24 settembre 2026CVE-2026-71362Commerce and Magento Adobe Commerce and Magento Incorrect Authorization Vulnerability
  3. 8 settembre 2026CVE-2026-75650Commerce and MagentoAdobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
  4. 7 luglio 2026CVE-2026-48282ColdFusionAdobe ColdFusion Path Traversal Vulnerability
  5. 20 maggio 2026CVE-2009-3459Acrobat and ReaderAdobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
  6. 13 aprile 2026CVE-2026-34621Acrobat and ReaderAdobe Acrobat and Reader Prototype Pollution Vulnerability
  7. 13 aprile 2026CVE-2020-9715AcrobatAdobe Acrobat Use-After-Free Vulnerability
  8. 24 ottobre 2025CVE-2025-54236Commerce and MagentoAdobe Commerce and Magento Improper Input Validation Vulnerability
  9. 15 ottobre 2025CVE-2025-54253Experience Manager (AEM) FormsAdobe Experience Manager Forms Code Execution Vulnerability
  10. 24 febbraio 2025CVE-2017-3066ColdFusionAdobe ColdFusion Deserialization Vulnerability
  11. 16 dicembre 2024CVE-2024-20767ColdFusionAdobe ColdFusion Improper Access Control Vulnerability
  12. 17 settembre 2024CVE-2014-0502Flash PlayerAdobe Flash Player Double Free Vulnerablity
  13. 17 settembre 2024CVE-2014-0497Flash PlayerAdobe Flash Player Integer Underflow Vulnerablity
  14. 17 settembre 2024CVE-2013-0648Flash PlayerAdobe Flash Player Code Execution Vulnerability
  15. 17 settembre 2024CVE-2013-0643Flash PlayerAdobe Flash Player Incorrect Default Permissions Vulnerability
  16. 17 luglio 2024CVE-2024-34102Commerce and Magento Open SourceAdobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability
  17. 8 gennaio 2024CVE-2023-38203ColdFusionAdobe ColdFusion Deserialization of Untrusted Data VulnerabilityRansomware
  18. 8 gennaio 2024CVE-2023-29300ColdFusionAdobe ColdFusion Deserialization of Untrusted Data VulnerabilityRansomware
  19. 10 ottobre 2023CVE-2023-21608Acrobat and ReaderAdobe Acrobat and Reader Use-After-Free Vulnerability
  20. 14 settembre 2023CVE-2023-26369Acrobat and ReaderAdobe Acrobat and Reader Out-of-Bounds Write Vulnerability
  21. 21 agosto 2023CVE-2023-26359ColdFusionAdobe ColdFusion Deserialization of Untrusted Data Vulnerability
  22. 20 luglio 2023CVE-2023-38205ColdFusionAdobe ColdFusion Improper Access Control Vulnerability
  23. 20 luglio 2023CVE-2023-29298ColdFusionAdobe ColdFusion Improper Access Control Vulnerability
  24. 15 marzo 2023CVE-2023-26360ColdFusionAdobe ColdFusion Deserialization of Untrusted Data Vulnerability
  25. 8 giugno 2022CVE-2018-4990Acrobat and ReaderAdobe Acrobat and Reader Double Free Vulnerability
  26. 8 giugno 2022CVE-2012-5054Flash PlayerAdobe Flash Player Integer Overflow Vulnerability
  27. 8 giugno 2022CVE-2012-0767Flash PlayerAdobe Flash Player Cross-Site Scripting (XSS) Vulnerability
  28. 8 giugno 2022CVE-2012-0754Flash PlayerAdobe Flash Player Memory Corruption Vulnerability
  29. 8 giugno 2022CVE-2011-2462Reader and AcrobatAdobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability
  30. 8 giugno 2022CVE-2011-0609Flash PlayerAdobe Flash Player Unspecified Vulnerability
  31. 8 giugno 2022CVE-2010-2883Acrobat and ReaderAdobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability
  32. 8 giugno 2022CVE-2010-1297Flash PlayerAdobe Flash Player Memory Corruption Vulnerability
  33. 8 giugno 2022CVE-2009-4324Acrobat and ReaderAdobe Acrobat and Reader Use-After-Free Vulnerability
  34. 8 giugno 2022CVE-2009-3953Acrobat and ReaderAdobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
  35. 8 giugno 2022CVE-2009-1862Acrobat and Reader, Flash PlayerAdobe Acrobat and Reader, Flash Player Unspecified Vulnerability
  36. 8 giugno 2022CVE-2008-0655Acrobat and ReaderAdobe Acrobat and Reader Unspecified Vulnerability
  37. 8 giugno 2022CVE-2007-5659Acrobat and ReaderAdobe Acrobat and Reader Buffer Overflow Vulnerability
  38. 25 maggio 2022CVE-2016-1010Flash Player and AIRAdobe Flash Player and AIR Integer Overflow Vulnerability
  39. 25 maggio 2022CVE-2016-0984Flash Player and AIRAdobe Flash Player and AIR Use-After-Free Vulnerability
  40. 25 maggio 2022CVE-2015-8651Flash PlayerAdobe Flash Player Integer Overflow Vulnerability
  41. 25 maggio 2022CVE-2015-0310Flash PlayerAdobe Flash Player ASLR Bypass Vulnerability
  42. 25 maggio 2022CVE-2014-8439Flash PlayerAdobe Flash Player Dereferenced Pointer Vulnerability
  43. 25 maggio 2022CVE-2014-0546Reader and AcrobatAdobe Reader and Acrobat Sandbox Bypass Vulnerability
  44. 23 maggio 2022CVE-2018-5002Flash PlayerAdobe Flash Player Stack-based Buffer Overflow Vulnerability
  45. 13 aprile 2022CVE-2015-5123Flash PlayerAdobe Flash Player Use-After-Free Vulnerability
  46. 13 aprile 2022CVE-2015-5122Flash PlayerAdobe Flash Player Use-After-Free Vulnerability
  47. 13 aprile 2022CVE-2015-3113Flash PlayerAdobe Flash Player Heap-Based Buffer Overflow Vulnerability
  48. 13 aprile 2022CVE-2015-0313Flash PlayerAdobe Flash Player Use-After-Free Vulnerability
  49. 13 aprile 2022CVE-2015-0311Flash PlayerAdobe Flash Player Remote Code Execution Vulnerability
  50. 13 aprile 2022CVE-2014-9163Flash PlayerAdobe Flash Player Stack-Based Buffer Overflow Vulnerability
  51. 28 marzo 2022CVE-2013-2729Reader and AcrobatAdobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability
  52. 28 marzo 2022CVE-2012-2034Flash PlayerAdobe Flash Player Memory Corruption Vulnerability
  53. 25 marzo 2022CVE-2016-7892Flash PlayerAdobe Flash Player Use-After-Free Vulnerability
  54. 25 marzo 2022CVE-2016-4171Flash PlayerAdobe Flash Player Remote Code Execution Vulnerability
  55. 25 marzo 2022CVE-2010-2861ColdFusionAdobe ColdFusion Directory Traversal VulnerabilityRansomware
  56. 25 marzo 2022CVE-2009-0927Reader and AcrobatAdobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability
  57. 7 marzo 2022CVE-2013-0631ColdFusionAdobe ColdFusion Information Disclosure Vulnerability
  58. 7 marzo 2022CVE-2013-0629ColdFusionAdobe ColdFusion Directory Traversal Vulnerability
  59. 7 marzo 2022CVE-2013-0625ColdFusionAdobe ColdFusion Authentication Bypass Vulnerability
  60. 7 marzo 2022CVE-2009-3960BlazeDSAdobe BlazeDS Information Disclosure VulnerabilityRansomware
  61. 3 marzo 2022CVE-2017-11292Flash PlayerAdobe Flash Player Type Confusion Vulnerability
  62. 3 marzo 2022CVE-2016-7855Flash PlayerAdobe Flash Player Use-After-Free Vulnerability
  63. 3 marzo 2022CVE-2016-4117Flash PlayerAdobe Flash Player Arbitrary Code Execution VulnerabilityRansomware
  64. 3 marzo 2022CVE-2016-1019Flash PlayerAdobe Flash Player Arbitrary Code Execution VulnerabilityRansomware
  65. 3 marzo 2022CVE-2015-7645Flash PlayerAdobe Flash Player Arbitrary Code Execution VulnerabilityRansomware
  66. 3 marzo 2022CVE-2015-5119Flash PlayerAdobe Flash Player Use-After-Free Vulnerability
  67. 3 marzo 2022CVE-2015-3043Flash PlayerAdobe Flash Player Memory Corruption Vulnerability
  68. 3 marzo 2022CVE-2014-0496Reader and AcrobatAdobe Reader and Acrobat Use-After-Free Vulnerability
  69. 3 marzo 2022CVE-2013-3346Reader and AcrobatAdobe Reader and Acrobat Memory Corruption Vulnerability
  70. 3 marzo 2022CVE-2013-0641ReaderAdobe Reader Buffer Overflow Vulnerability
  71. 3 marzo 2022CVE-2013-0640Reader and AcrobatAdobe Reader and Acrobat Memory Corruption Vulnerability
  72. 3 marzo 2022CVE-2013-0632ColdFusionAdobe ColdFusion Authentication Bypass Vulnerability
  73. 3 marzo 2022CVE-2012-1535Flash PlayerAdobe Flash Player Arbitrary Code Execution Vulnerability
  74. 3 marzo 2022CVE-2011-0611Flash PlayerAdobe Flash Player Remote Code Execution Vulnerability
  75. 3 marzo 2022CVE-2010-0188Reader and AcrobatAdobe Reader and Acrobat Arbitrary Code Execution VulnerabilityRansomware
  76. 3 marzo 2022CVE-2008-2992Acrobat and ReaderAdobe Reader and Acrobat Input Validation VulnerabilityRansomware
  77. 15 febbraio 2022CVE-2022-24086Commerce and Magento Open SourceAdobe Commerce and Magento Open Source Improper Input Validation Vulnerability
  78. 15 febbraio 2022CVE-2018-15982Flash PlayerAdobe Flash Player Use-After-Free VulnerabilityRansomware
  79. 3 novembre 2021CVE-2021-28550Acrobat and ReaderAdobe Acrobat and Reader Use-After-Free Vulnerability
  80. 3 novembre 2021CVE-2021-21017Acrobat and ReaderAdobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability
  81. 3 novembre 2021CVE-2018-4939ColdFusionAdobe ColdFusion Deserialization of Untrusted Data Vulnerability
  82. 3 novembre 2021CVE-2018-4878Flash PlayerAdobe Flash Player Use-After-Free VulnerabilityRansomware
  83. 3 novembre 2021CVE-2018-15961ColdFusionAdobe ColdFusion Unrestricted File Upload Vulnerability

Dati: catalogo Known Exploited Vulnerabilities (KEV) della CISA, ultima aggiunta il 4 novembre 2026.
Il catalogo elenca solo le vulnerabilità con prove di sfruttamento, non tutte quelle del produttore.

Avvisi solo sui prodotti che usi

Con My Defence ricevi avvisi e briefing solo sui prodotti che usi, anche di Adobe.

Tutti i produttoriIl catalogo sul sito della CISA