adobe

7,148 tracked vulnerabilities.

CVE-2025-24452 HIGH
InDesign < 19.5.3 - Out-of-bounds Write via Malicious File
Mar 11, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-24451 HIGH
Substance 3D Painter < 11.0.0 - Out-of-bounds Write via Malicious File
Mar 11, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-24450 HIGH
Substance 3D Painter < 11.0.0 - Out-of-bounds Write via Malicious File
Mar 11, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-24449 MEDIUM
Adobe Illustrator < 28.7.5 - Out-of-bounds Read via Malicious File
Mar 11, 2025
CVSS 5.5
EPSS 0.00
CVE-2025-24448 MEDIUM
Adobe Illustrator < 28.7.5 - Out-of-bounds Read via Malicious File
Mar 11, 2025
CVSS 5.5
EPSS 0.00
CVE-2025-24445 HIGH
Substance3D Sampler < 5.0 - Out-of-bounds Write via Malicious File
Mar 11, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-24444 HIGH
Substance 3D Sampler < 5.0 - Out-of-bounds Write via Malicious File
Mar 11, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-24443 HIGH
Substance 3D Sampler < 5.0 - Heap-based Buffer Overflow via Malicious File
Mar 11, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-24442 HIGH
Substance 3D Sampler < 5.0 - Out-of-bounds Write via Malicious File
Mar 11, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-24441 HIGH
Substance 3D Sampler < 5.0 - Out-of-bounds Write via Malicious File
Mar 11, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-24440 HIGH
Substance3D Sampler < 5.0 - Out-of-bounds Write via Malicious File
Mar 11, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-24439 HIGH
Substance3D Sampler < 5.0 - Heap-based Buffer Overflow via Malicious File
Mar 11, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-24431 MEDIUM
Adobe Acrobat and Reader < 20.005.30763 and < 25.001.20432 - Out-of-bounds Read
Mar 11, 2025
CVSS 5.5
EPSS 0.00
CVE-2025-27172 HIGH
Substance3D Designer < 14.1.1 - Out-of-bounds Write via Malicious File
Mar 11, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-21169 HIGH
Substance 3D Designer < 14.1.1 - Heap-based Buffer Overflow via Malicious File
Mar 11, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-24438 HIGH
Adobe Commerce <=2.4.8-beta1 - Stored XSS in Form Fields
Feb 11, 2025
CVSS 8.7
EPSS 0.01
CVE-2025-24437 MEDIUM
Adobe Commerce 2.4.7-p3 2.4.6-p8 2.4.5-p10 2.4.4-p11 2.4.8-beta1 and earlier - Incorrect Authorization
Feb 11, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-24436 MEDIUM
Adobe Commerce 2.4.4-p11 2.4.5-p10 2.4.6-p8 2.4.7-p3 2.4.8-beta1 - Incorrect Authorization
Feb 11, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-24435 MEDIUM
Adobe Commerce <=2.4.8-beta1 - Authenticated Privilege Escalation via Improper Access Control
Feb 11, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-24434 CRITICAL
Adobe Commerce <=2.4.8-beta1 Incorrect Authorization Privilege Escalation
Feb 11, 2025
CVSS 9.1
EPSS 0.00
CVE-2025-24432 LOW
Adobe Commerce < 2.4.4 - Time-of-check Time-of-use Race Condition
Feb 11, 2025
CVSS 3.7
EPSS 0.00
CVE-2025-24430 LOW
Adobe Commerce < 2.4.4 - Time-of-check Time-of-use Race Condition
Feb 11, 2025
CVSS 3.7
EPSS 0.00
CVE-2025-24429 LOW
Adobe Commerce < 2.4.4 - Improper Access Control
Feb 11, 2025
CVSS 3.5
EPSS 0.00
CVE-2025-24428 MEDIUM
Adobe Commerce < 2.4.4 - Stored Cross-Site Scripting in Form Fields
Feb 11, 2025
CVSS 5.4
EPSS 0.01
CVE-2025-24427 MEDIUM
Adobe Commerce < 2.4.4 - Improper Access Control
Feb 11, 2025
CVSS 6.5
EPSS 0.00
Products
acrobat_dc 1,781 acrobat_reader_dc 1,781 acrobat 1,359 experience_manager 1,088 flash_player 1,084 acrobat_reader 1,076 air 413 air_sdk 409 air_sdk_\&_compiler 365 reader 360 flash_player_desktop_runtime 294 coldfusion 208 indesign 190 commerce 184 experience_manager_cloud_service 183 shockwave_player 174 illustrator 173 magento 161 adobe_air 146 bridge 136 after_effects 125 framemaker 118 dimension 116 commerce_b2b 111 animate 102 adobe_air_sdk 96 photoshop 92 air_desktop_runtime 88 substance_3d_stager 87 substance_3d_painter 78
Quick Filters
Critical CVEs With Exploits In CISA KEV