Vendor
Adobe vulnerabilities under active attack
83 Adobe vulnerabilities have confirmed evidence of exploitation in the wild, and 11 are used in ransomware campaigns.
83
confirmed exploited
11
used in ransomware
82
past fix deadline
- CVE-2026-48356 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability Adobe · Commerce and Magento
- CVE-2026-71362 Adobe Commerce and Magento Incorrect Authorization Vulnerability Adobe · Commerce and Magento
- CVE-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Adobe · Commerce and Magento
- CVE-2026-48282 Adobe ColdFusion Path Traversal Vulnerability Adobe · ColdFusion
- CVE-2009-3459 Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability Adobe · Acrobat and Reader
- CVE-2020-9715 Adobe Acrobat Use-After-Free Vulnerability Adobe · Acrobat
- CVE-2026-34621 Adobe Acrobat and Reader Prototype Pollution Vulnerability Adobe · Acrobat and Reader
- CVE-2025-54236 Adobe Commerce and Magento Improper Input Validation Vulnerability Adobe · Commerce and Magento
- CVE-2025-54253 Adobe Experience Manager Forms Code Execution Vulnerability Adobe · Experience Manager (AEM) Forms
- CVE-2017-3066 Adobe ColdFusion Deserialization Vulnerability Adobe · ColdFusion
- CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability Adobe · ColdFusion
- CVE-2014-0502 Adobe Flash Player Double Free Vulnerablity Adobe · Flash Player
- CVE-2013-0648 Adobe Flash Player Code Execution Vulnerability Adobe · Flash Player
- CVE-2013-0643 Adobe Flash Player Incorrect Default Permissions Vulnerability Adobe · Flash Player
- CVE-2014-0497 Adobe Flash Player Integer Underflow Vulnerablity Adobe · Flash Player
- CVE-2024-34102 Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability Adobe · Commerce and Magento Open Source
- CVE-2023-29300 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe · ColdFusion
- CVE-2023-38203 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe · ColdFusion
- CVE-2023-21608 Adobe Acrobat and Reader Use-After-Free Vulnerability Adobe · Acrobat and Reader
- CVE-2023-26369 Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability Adobe · Acrobat and Reader
- CVE-2023-26359 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe · ColdFusion
- CVE-2023-29298 Adobe ColdFusion Improper Access Control Vulnerability Adobe · ColdFusion
- CVE-2023-38205 Adobe ColdFusion Improper Access Control Vulnerability Adobe · ColdFusion
- CVE-2023-26360 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe · ColdFusion
- CVE-2018-4990 Adobe Acrobat and Reader Double Free Vulnerability Adobe · Acrobat and Reader
- CVE-2012-5054 Adobe Flash Player Integer Overflow Vulnerability Adobe · Flash Player
- CVE-2012-0767 Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability Adobe · Flash Player
- CVE-2012-0754 Adobe Flash Player Memory Corruption Vulnerability Adobe · Flash Player
- CVE-2011-2462 Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability Adobe · Reader and Acrobat
- CVE-2011-0609 Adobe Flash Player Unspecified Vulnerability Adobe · Flash Player
- CVE-2010-2883 Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability Adobe · Acrobat and Reader
- CVE-2010-1297 Adobe Flash Player Memory Corruption Vulnerability Adobe · Flash Player
- CVE-2009-4324 Adobe Acrobat and Reader Use-After-Free Vulnerability Adobe · Acrobat and Reader
- CVE-2009-3953 Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability Adobe · Acrobat and Reader
- CVE-2009-1862 Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability Adobe · Acrobat and Reader, Flash Player
- CVE-2008-0655 Adobe Acrobat and Reader Unspecified Vulnerability Adobe · Acrobat and Reader
- CVE-2007-5659 Adobe Acrobat and Reader Buffer Overflow Vulnerability Adobe · Acrobat and Reader
- CVE-2016-1010 Adobe Flash Player and AIR Integer Overflow Vulnerability Adobe · Flash Player and AIR
- CVE-2016-0984 Adobe Flash Player and AIR Use-After-Free Vulnerability Adobe · Flash Player and AIR
- CVE-2015-0310 Adobe Flash Player ASLR Bypass Vulnerability Adobe · Flash Player
- CVE-2015-8651 Adobe Flash Player Integer Overflow Vulnerability Adobe · Flash Player
- CVE-2014-8439 Adobe Flash Player Dereferenced Pointer Vulnerability Adobe · Flash Player
- CVE-2014-0546 Adobe Reader and Acrobat Sandbox Bypass Vulnerability Adobe · Reader and Acrobat
- CVE-2018-5002 Adobe Flash Player Stack-based Buffer Overflow Vulnerability Adobe · Flash Player
- CVE-2015-5123 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2015-5122 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2015-3113 Adobe Flash Player Heap-Based Buffer Overflow Vulnerability Adobe · Flash Player
- CVE-2015-0313 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2015-0311 Adobe Flash Player Remote Code Execution Vulnerability Adobe · Flash Player
- CVE-2014-9163 Adobe Flash Player Stack-Based Buffer Overflow Vulnerability Adobe · Flash Player
- CVE-2013-2729 Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability Adobe · Reader and Acrobat
- CVE-2012-2034 Adobe Flash Player Memory Corruption Vulnerability Adobe · Flash Player
- CVE-2016-7892 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2016-4171 Adobe Flash Player Remote Code Execution Vulnerability Adobe · Flash Player
- CVE-2010-2861 Adobe ColdFusion Directory Traversal Vulnerability Adobe · ColdFusion
- CVE-2009-0927 Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability Adobe · Reader and Acrobat
- CVE-2013-0631 Adobe ColdFusion Information Disclosure Vulnerability Adobe · ColdFusion
- CVE-2013-0629 Adobe ColdFusion Directory Traversal Vulnerability Adobe · ColdFusion
- CVE-2013-0625 Adobe ColdFusion Authentication Bypass Vulnerability Adobe · ColdFusion
- CVE-2009-3960 Adobe BlazeDS Information Disclosure Vulnerability Adobe · BlazeDS
- CVE-2017-11292 Adobe Flash Player Type Confusion Vulnerability Adobe · Flash Player
- CVE-2016-7855 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2016-4117 Adobe Flash Player Arbitrary Code Execution Vulnerability Adobe · Flash Player
- CVE-2016-1019 Adobe Flash Player Arbitrary Code Execution Vulnerability Adobe · Flash Player
- CVE-2015-7645 Adobe Flash Player Arbitrary Code Execution Vulnerability Adobe · Flash Player
- CVE-2015-5119 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2015-3043 Adobe Flash Player Memory Corruption Vulnerability Adobe · Flash Player
- CVE-2014-0496 Adobe Reader and Acrobat Use-After-Free Vulnerability Adobe · Reader and Acrobat
- CVE-2013-3346 Adobe Reader and Acrobat Memory Corruption Vulnerability Adobe · Reader and Acrobat
- CVE-2013-0641 Adobe Reader Buffer Overflow Vulnerability Adobe · Reader
- CVE-2013-0640 Adobe Reader and Acrobat Memory Corruption Vulnerability Adobe · Reader and Acrobat
- CVE-2013-0632 Adobe ColdFusion Authentication Bypass Vulnerability Adobe · ColdFusion
- CVE-2012-1535 Adobe Flash Player Arbitrary Code Execution Vulnerability Adobe · Flash Player
- CVE-2011-0611 Adobe Flash Player Remote Code Execution Vulnerability Adobe · Flash Player
- CVE-2010-0188 Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability Adobe · Reader and Acrobat
- CVE-2008-2992 Adobe Reader and Acrobat Input Validation Vulnerability Adobe · Acrobat and Reader
- CVE-2022-24086 Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability Adobe · Commerce and Magento Open Source
- CVE-2018-15982 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player
- CVE-2021-21017 Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability Adobe · Acrobat and Reader
- CVE-2021-28550 Adobe Acrobat and Reader Use-After-Free Vulnerability Adobe · Acrobat and Reader
- CVE-2018-4939 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe · ColdFusion
- CVE-2018-15961 Adobe ColdFusion Unrestricted File Upload Vulnerability Adobe · ColdFusion
- CVE-2018-4878 Adobe Flash Player Use-After-Free Vulnerability Adobe · Flash Player