EN
DeutschEnglishEspañolFrançaisItaliano

Start free Dashboard

Exploited vulnerabilities

Adobe

83 Adobe vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue83
Last 12 months7
In ransomware campaigns11
Last addition27 October 2026

The vulnerabilities83

  1. 27 October 2026CVE-2026-48356Commerce and MagentoAdobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
  2. 24 September 2026CVE-2026-71362Commerce and Magento Adobe Commerce and Magento Incorrect Authorization Vulnerability
  3. 8 September 2026CVE-2026-75650Commerce and MagentoAdobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
  4. 7 July 2026CVE-2026-48282ColdFusionAdobe ColdFusion Path Traversal Vulnerability
  5. 20 May 2026CVE-2009-3459Acrobat and ReaderAdobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
  6. 13 April 2026CVE-2026-34621Acrobat and ReaderAdobe Acrobat and Reader Prototype Pollution Vulnerability
  7. 13 April 2026CVE-2020-9715AcrobatAdobe Acrobat Use-After-Free Vulnerability
  8. 24 October 2025CVE-2025-54236Commerce and MagentoAdobe Commerce and Magento Improper Input Validation Vulnerability
  9. 15 October 2025CVE-2025-54253Experience Manager (AEM) FormsAdobe Experience Manager Forms Code Execution Vulnerability
  10. 24 February 2025CVE-2017-3066ColdFusionAdobe ColdFusion Deserialization Vulnerability
  11. 16 December 2024CVE-2024-20767ColdFusionAdobe ColdFusion Improper Access Control Vulnerability
  12. 17 September 2024CVE-2014-0502Flash PlayerAdobe Flash Player Double Free Vulnerablity
  13. 17 September 2024CVE-2014-0497Flash PlayerAdobe Flash Player Integer Underflow Vulnerablity
  14. 17 September 2024CVE-2013-0648Flash PlayerAdobe Flash Player Code Execution Vulnerability
  15. 17 September 2024CVE-2013-0643Flash PlayerAdobe Flash Player Incorrect Default Permissions Vulnerability
  16. 17 July 2024CVE-2024-34102Commerce and Magento Open SourceAdobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability
  17. 8 January 2024CVE-2023-38203ColdFusionAdobe ColdFusion Deserialization of Untrusted Data VulnerabilityRansomware
  18. 8 January 2024CVE-2023-29300ColdFusionAdobe ColdFusion Deserialization of Untrusted Data VulnerabilityRansomware
  19. 10 October 2023CVE-2023-21608Acrobat and ReaderAdobe Acrobat and Reader Use-After-Free Vulnerability
  20. 14 September 2023CVE-2023-26369Acrobat and ReaderAdobe Acrobat and Reader Out-of-Bounds Write Vulnerability
  21. 21 August 2023CVE-2023-26359ColdFusionAdobe ColdFusion Deserialization of Untrusted Data Vulnerability
  22. 20 July 2023CVE-2023-38205ColdFusionAdobe ColdFusion Improper Access Control Vulnerability
  23. 20 July 2023CVE-2023-29298ColdFusionAdobe ColdFusion Improper Access Control Vulnerability
  24. 15 March 2023CVE-2023-26360ColdFusionAdobe ColdFusion Deserialization of Untrusted Data Vulnerability
  25. 8 June 2022CVE-2018-4990Acrobat and ReaderAdobe Acrobat and Reader Double Free Vulnerability
  26. 8 June 2022CVE-2012-5054Flash PlayerAdobe Flash Player Integer Overflow Vulnerability
  27. 8 June 2022CVE-2012-0767Flash PlayerAdobe Flash Player Cross-Site Scripting (XSS) Vulnerability
  28. 8 June 2022CVE-2012-0754Flash PlayerAdobe Flash Player Memory Corruption Vulnerability
  29. 8 June 2022CVE-2011-2462Reader and AcrobatAdobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability
  30. 8 June 2022CVE-2011-0609Flash PlayerAdobe Flash Player Unspecified Vulnerability
  31. 8 June 2022CVE-2010-2883Acrobat and ReaderAdobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability
  32. 8 June 2022CVE-2010-1297Flash PlayerAdobe Flash Player Memory Corruption Vulnerability
  33. 8 June 2022CVE-2009-4324Acrobat and ReaderAdobe Acrobat and Reader Use-After-Free Vulnerability
  34. 8 June 2022CVE-2009-3953Acrobat and ReaderAdobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
  35. 8 June 2022CVE-2009-1862Acrobat and Reader, Flash PlayerAdobe Acrobat and Reader, Flash Player Unspecified Vulnerability
  36. 8 June 2022CVE-2008-0655Acrobat and ReaderAdobe Acrobat and Reader Unspecified Vulnerability
  37. 8 June 2022CVE-2007-5659Acrobat and ReaderAdobe Acrobat and Reader Buffer Overflow Vulnerability
  38. 25 May 2022CVE-2016-1010Flash Player and AIRAdobe Flash Player and AIR Integer Overflow Vulnerability
  39. 25 May 2022CVE-2016-0984Flash Player and AIRAdobe Flash Player and AIR Use-After-Free Vulnerability
  40. 25 May 2022CVE-2015-8651Flash PlayerAdobe Flash Player Integer Overflow Vulnerability
  41. 25 May 2022CVE-2015-0310Flash PlayerAdobe Flash Player ASLR Bypass Vulnerability
  42. 25 May 2022CVE-2014-8439Flash PlayerAdobe Flash Player Dereferenced Pointer Vulnerability
  43. 25 May 2022CVE-2014-0546Reader and AcrobatAdobe Reader and Acrobat Sandbox Bypass Vulnerability
  44. 23 May 2022CVE-2018-5002Flash PlayerAdobe Flash Player Stack-based Buffer Overflow Vulnerability
  45. 13 April 2022CVE-2015-5123Flash PlayerAdobe Flash Player Use-After-Free Vulnerability
  46. 13 April 2022CVE-2015-5122Flash PlayerAdobe Flash Player Use-After-Free Vulnerability
  47. 13 April 2022CVE-2015-3113Flash PlayerAdobe Flash Player Heap-Based Buffer Overflow Vulnerability
  48. 13 April 2022CVE-2015-0313Flash PlayerAdobe Flash Player Use-After-Free Vulnerability
  49. 13 April 2022CVE-2015-0311Flash PlayerAdobe Flash Player Remote Code Execution Vulnerability
  50. 13 April 2022CVE-2014-9163Flash PlayerAdobe Flash Player Stack-Based Buffer Overflow Vulnerability
  51. 28 March 2022CVE-2013-2729Reader and AcrobatAdobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability
  52. 28 March 2022CVE-2012-2034Flash PlayerAdobe Flash Player Memory Corruption Vulnerability
  53. 25 March 2022CVE-2016-7892Flash PlayerAdobe Flash Player Use-After-Free Vulnerability
  54. 25 March 2022CVE-2016-4171Flash PlayerAdobe Flash Player Remote Code Execution Vulnerability
  55. 25 March 2022CVE-2010-2861ColdFusionAdobe ColdFusion Directory Traversal VulnerabilityRansomware
  56. 25 March 2022CVE-2009-0927Reader and AcrobatAdobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability
  57. 7 March 2022CVE-2013-0631ColdFusionAdobe ColdFusion Information Disclosure Vulnerability
  58. 7 March 2022CVE-2013-0629ColdFusionAdobe ColdFusion Directory Traversal Vulnerability
  59. 7 March 2022CVE-2013-0625ColdFusionAdobe ColdFusion Authentication Bypass Vulnerability
  60. 7 March 2022CVE-2009-3960BlazeDSAdobe BlazeDS Information Disclosure VulnerabilityRansomware
  61. 3 March 2022CVE-2017-11292Flash PlayerAdobe Flash Player Type Confusion Vulnerability
  62. 3 March 2022CVE-2016-7855Flash PlayerAdobe Flash Player Use-After-Free Vulnerability
  63. 3 March 2022CVE-2016-4117Flash PlayerAdobe Flash Player Arbitrary Code Execution VulnerabilityRansomware
  64. 3 March 2022CVE-2016-1019Flash PlayerAdobe Flash Player Arbitrary Code Execution VulnerabilityRansomware
  65. 3 March 2022CVE-2015-7645Flash PlayerAdobe Flash Player Arbitrary Code Execution VulnerabilityRansomware
  66. 3 March 2022CVE-2015-5119Flash PlayerAdobe Flash Player Use-After-Free Vulnerability
  67. 3 March 2022CVE-2015-3043Flash PlayerAdobe Flash Player Memory Corruption Vulnerability
  68. 3 March 2022CVE-2014-0496Reader and AcrobatAdobe Reader and Acrobat Use-After-Free Vulnerability
  69. 3 March 2022CVE-2013-3346Reader and AcrobatAdobe Reader and Acrobat Memory Corruption Vulnerability
  70. 3 March 2022CVE-2013-0641ReaderAdobe Reader Buffer Overflow Vulnerability
  71. 3 March 2022CVE-2013-0640Reader and AcrobatAdobe Reader and Acrobat Memory Corruption Vulnerability
  72. 3 March 2022CVE-2013-0632ColdFusionAdobe ColdFusion Authentication Bypass Vulnerability
  73. 3 March 2022CVE-2012-1535Flash PlayerAdobe Flash Player Arbitrary Code Execution Vulnerability
  74. 3 March 2022CVE-2011-0611Flash PlayerAdobe Flash Player Remote Code Execution Vulnerability
  75. 3 March 2022CVE-2010-0188Reader and AcrobatAdobe Reader and Acrobat Arbitrary Code Execution VulnerabilityRansomware
  76. 3 March 2022CVE-2008-2992Acrobat and ReaderAdobe Reader and Acrobat Input Validation VulnerabilityRansomware
  77. 15 February 2022CVE-2022-24086Commerce and Magento Open SourceAdobe Commerce and Magento Open Source Improper Input Validation Vulnerability
  78. 15 February 2022CVE-2018-15982Flash PlayerAdobe Flash Player Use-After-Free VulnerabilityRansomware
  79. 3 November 2021CVE-2021-28550Acrobat and ReaderAdobe Acrobat and Reader Use-After-Free Vulnerability
  80. 3 November 2021CVE-2021-21017Acrobat and ReaderAdobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability
  81. 3 November 2021CVE-2018-4939ColdFusionAdobe ColdFusion Deserialization of Untrusted Data Vulnerability
  82. 3 November 2021CVE-2018-4878Flash PlayerAdobe Flash Player Use-After-Free VulnerabilityRansomware
  83. 3 November 2021CVE-2018-15961ColdFusionAdobe ColdFusion Unrestricted File Upload Vulnerability

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, Adobe included.

Start freeMy Defence

All vendorsThe catalogue on the CISA website