adobe

7,383 tracked vulnerabilities.

CVE-2025-49569 HIGH
Substance3D Viewer < 0.25.1 - Out-of-bounds Write
Aug 12, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-49560 HIGH
Substance3D Viewer < 0.25.1 - Heap-based Buffer Overflow via Malicious File
Aug 12, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-49559 MEDIUM
Adobe Commerce < 2.4.4 - Path Traversal
Aug 12, 2025
CVSS 5.3
EPSS 0.01
CVE-2025-49558 MEDIUM
Adobe Commerce < 2.4.4 - Time-of-check Time-of-use Race Condition
Aug 12, 2025
CVSS 5.9
EPSS 0.00
CVE-2025-49557 HIGH
Adobe Commerce < 2.4.4 - Stored Cross-Site Scripting in Form Fields
Aug 12, 2025
CVSS 8.7
EPSS 0.01
CVE-2025-49556 HIGH
Adobe Commerce < 2.4.4 - Incorrect Authorization
Aug 12, 2025
CVSS 7.5
EPSS 0.01
CVE-2025-49555 HIGH
Adobe Commerce < 2.4.4 - Cross-Site Request Forgery
Aug 12, 2025
CVSS 8.1
EPSS 0.01
CVE-2025-49554 HIGH
Adobe Commerce < 2.4.4 - Denial of Service via Improper Input Validation
Aug 12, 2025
CVSS 7.5
EPSS 0.01
CVE-2025-49568 MEDIUM
Illustrator 28.0-28.7.8 and 29.6.1 - Use-After-Free via Malicious File
Aug 12, 2025
CVSS 5.5
EPSS 0.00
CVE-2025-49567 MEDIUM
Illustrator 28.0-28.7.8 and 29.6.1 - Denial of Service via Malicious File
Aug 12, 2025
CVSS 5.5
EPSS 0.00
CVE-2025-49564 HIGH
Adobe Illustrator < 28.7.9 - Stack-based Buffer Overflow via Malicious File
Aug 12, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-49563 HIGH
Adobe Illustrator < 28.7.9 - Out-of-bounds Write via Malicious File
Aug 12, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-54254 HIGH
Adobe Experience Manager Forms < 6.5.23.0 - XML External Entity Injection
Aug 05, 2025
CVSS 8.6
EPSS 0.77
CVE-2025-54253 CRITICAL KEV
Adobe Experience Manager Forms < 6.5.23.0 - Unauthenticated Arbitrary Code Execution via Misconfiguration
Aug 05, 2025
CVSS 10.0
EPSS 0.88
CVE-2025-46958 MEDIUM
Adobe Experience Manager <6.5.22 - XSS
Aug 05, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-47001 MEDIUM
Adobe Experience Manager <6.5.22 - XSS
Jul 30, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-47061 MEDIUM
Adobe Experience Manager < 6.5.23.0 and < 2025.5 - Stored Cross-Site Scripting in Form Fields
Jul 24, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-46996 MEDIUM
Adobe Experience Manager <6.5.22 - XSS
Jul 24, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-46993 MEDIUM
Adobe Experience Manager <6.5.22 - XSS
Jul 24, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-47053 MEDIUM
Adobe Experience Manager < 6.5.23.0 and < 2025.5 - DOM-based Cross-Site Scripting
Jul 16, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-46959 MEDIUM
Adobe Experience Manager <6.5.22 - XSS
Jul 16, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-47133 HIGH
Adobe Framemaker < 2020.9 - Out-of-bounds Write via Malicious File
Jul 08, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-47132 HIGH
Adobe Framemaker < 2020.9 - Out-of-bounds Write via Malicious File
Jul 08, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-47131 HIGH
Adobe Framemaker < 2020.9 - Heap-based Buffer Overflow via Malicious File
Jul 08, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-47130 HIGH
Adobe Framemaker < 2020.9 - Integer Underflow leading to Arbitrary Code Execution
Jul 08, 2025
CVSS 7.8
EPSS 0.00
Products
acrobat_dc 1,799 acrobat_reader_dc 1,799 acrobat 1,381 experience_manager 1,148 acrobat_reader 1,085 flash_player 1,084 air 413 air_sdk 409 air_sdk_\&_compiler 365 reader 360 flash_player_desktop_runtime 294 coldfusion 228 indesign 202 commerce 184 experience_manager_cloud_service 183 shockwave_player 174 illustrator 173 magento 161 adobe_air 146 bridge 136 after_effects 125 framemaker 118 dimension 116 commerce_b2b 111 animate 102 adobe_air_sdk 96 photoshop 92 Acrobat Reader 90 air_desktop_runtime 88 substance_3d_stager 87
Quick Filters
Critical CVEs With Exploits In CISA KEV