adobe
777 known vulnerabilities affecting adobe products.
Products
experience_manager 214
coldfusion 68
acrobat 61
commerce 58
commerce_b2b 58
magento 58
c2pa 55
acrobat_dc 54
acrobat_reader_dc 54
c2pa-web 49
c2patool 33
indesign 29
bridge 23
illustrator 23
substance_3d_designer 23
campaign 22
after_effects 21
substance_3d_painter 21
substance_3d_sampler 16
dng_software_development_kit 15
i\/o_events 14
substance_3d_stager 13
lightroom 12
audition 12
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2010-2861 | Act now | 99.7% | 9.8 | ● | Multiple directory traversal vulnerabilities in the administrator console in Ado… |
| CVE-2016-4117 | Act now | 94.4% | 9.8 | ● | Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arb… |
| CVE-2009-3960 | Act now | 90.0% | 6.5 | ● | Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1… |
| CVE-2018-15982 | Act now | 89.1% | 7.8 | ● | Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a … |
| CVE-2010-0188 | Act now | 88.2% | 7.8 | ● | Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x b… |
| CVE-2026-48282 | Act now | 42.4% | 10.0 | ● | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limi… |
| CVE-2016-1019 | Act now | 22.3% | 9.8 | ● | Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a den… |
| CVE-2026-34621 | Act now | 7.1% | 8.6 | ● | Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by a… |
| CVE-2026-75650 | Act now | 2.1% | 10.0 | ● | Adobe Commerce is affected by an Improper Neutralization of Special Elements Use… |
| CVE-2026-48319 | Medium | 32.3% | 9.1 | ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted D… | |
| CVE-2026-27305 | Medium | 26.3% | 8.6 | ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limi… | |
| CVE-2026-71362 | Medium | 24.5% | 9.1 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul… | |
| CVE-2026-34648 | Medium | 22.6% | 7.5 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2… | |
| CVE-2026-34650 | Medium | 15.9% | 7.5 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2… | |
| CVE-2026-48376 | Medium | 15.5% | 5.4 | is affected by an Improper Encoding or Escaping of Output vulnerability that cou… | |
| CVE-2026-34649 | Medium | 14.4% | 7.5 | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2… | |
| CVE-2026-34619 | Medium | 7.6% | 7.7 | ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limi… | |
| CVE-2019-7105 | Medium | 7.6% | 9.8 | Adobe XD versions 16.0 and earlier have a path traversal vulnerability. Successf… | |
| CVE-2019-7106 | Medium | 7.6% | 9.8 | Adobe XD versions 16.0 and earlier have a path traversal vulnerability. Successf… | |
| CVE-2026-71386 | Medium | 6.9% | 8.8 | is affected by a Cross-site Scripting (XSS) vulnerability that could result in a… | |
| CVE-2026-48284 | Medium | 4.9% | 9.6 | ColdFusion is affected by an Improper Input Validation vulnerability that could … | |
| CVE-2026-48362 | Medium | 4.3% | 10.0 | ColdFusion is affected by an Improper Neutralization of Special Elements used in… | |
| CVE-2026-48320 | Medium | 4.3% | 8.5 | ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. … | |
| CVE-2026-27304 | Medium | 3.6% | 9.3 | ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Inpu… | |
| CVE-2021-21009 | Medium | 3.2% | 8.6 | Adobe Campaign Classic Gold Standard 10 (and earlier), 20.3.1 (and earlier), 20.… | |
| CVE-2026-48313 | Medium | 3.0% | 9.3 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limi… | |
| CVE-2026-47932 | Medium | 2.5% | 8.8 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limi… | |
| CVE-2026-47928 | Medium | 2.3% | 9.6 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Inpu… | |
| CVE-2026-47929 | Medium | 2.1% | 8.4 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Aut… | |
| CVE-2026-48273 | Medium | 1.9% | 9.9 | ColdFusion is affected by an Improper Neutralization of Directives in Dynamicall… | |
| CVE-2026-76195 | Medium | 1.6% | 10.0 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia… | |
| CVE-2026-76197 | Medium | 1.6% | 10.0 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia… | |
| CVE-2026-48358 | Medium | 1.5% | 9.1 | Adobe Commerce is affected by an Improper Encoding or Escaping of Output vulnera… | |
| CVE-2026-48324 | Medium | 1.4% | 9.1 | ColdFusion is affected by an Improper Neutralization of Special Elements used in… | |
| CVE-2026-82004 | Medium | 1.4% | 10.0 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia… | |
| CVE-2026-48281 | Medium | 1.4% | 10.0 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Inpu… | |
| CVE-2026-48277 | Medium | 1.3% | 10.0 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Inpu… | |
| CVE-2026-48276 | Medium | 1.3% | 10.0 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unrestricted … | |
| CVE-2026-48283 | Medium | 1.3% | 10.0 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unrestricted … | |
| CVE-2026-48322 | Medium | 1.2% | 9.9 | ColdFusion is affected by an Improper Control of Generation of Code ('Code Injec… | |
| CVE-2026-48385 | Medium | 1.2% | 7.7 | ColdFusion is affected by an Improper Neutralization of Special Elements used in… | |
| CVE-2026-48286 | Medium | 1.2% | 10.0 | Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected … | |
| CVE-2026-48316 | Medium | 1.1% | 10.0 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Inpu… | |
| CVE-2026-75746 | Medium | 1.1% | 9.1 | ColdFusion is affected by an Improper Neutralization of Special Elements used in… | |
| CVE-2026-48318 | Medium | 1.1% | 9.9 | ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted D… | |
| CVE-2026-48310 | Medium | 1.0% | 8.6 | Adobe Experience Manager is affected by an Improper Limitation of a Pathname to … | |
| CVE-2026-48315 | Medium | 1.0% | 9.3 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Inpu… | |
| CVE-2026-48359 | Medium | 1.0% | 9.6 | Adobe Experience Manager is affected by an Improper Restriction of XML External … | |
| CVE-2026-48356 | Medium | 1.0% | 9.3 | Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type… | |
| CVE-2026-47992 | Medium | 1.0% | 7.2 | Adobe Commerce is affected by an Improper Neutralization of Special Elements use… |
Page 1 of 16
Next →