Adobe — security advisories

87 advisories82 exploitedlatest 2026-07-07⚡ RSS feed

Tracked Adobe products:

Acrobat and Reader Acrobat Adobe Reader and Acrobat Adobe Commerce Experience Manager Forms Reader and Acrobat Flash Player ColdFusion Commerce and Magento Open Source Acrobat, Reader Reader Acrobat and Reader, Flash Player Flash Player and AIR Adobe Commerce and Magento Open Source Adobe Reader and Adobe Acrobat BlazeDS Adobe Acrobat and Reader Adobe Acrobat

⚡ Watch Adobe

Get an email when a new Adobe advisory drops — max one per day, one-click unsubscribe.

Adobe security advisory (AV26-647) – Update 2

criticalexploitedCVE-2026-48282cccs2026-07-07

CISA Adds One Known Exploited Vulnerability to Catalog

highexploitedCVE-2026-48282cisa2026-07-07

[UPDATE] [critical] Adobe ColdFusion: Multiple Vulnerabilities

criticalCVE-2026-48276 CVE-2026-48277 CVE-2026-48281 CVE-2026-48282cert-bund2026-07-07

CVE-2026-48282: Adobe ColdFusion Path Traversal Vulnerability

criticalexploitedCVE-2026-48282cisa-kev2026-07-07

NCSC-2026-0217 [1.00] [M/H] Vulnerabilities fixed in Adobe ColdFusion

unknownCVE-2026-48276 CVE-2026-48277 CVE-2026-48281 CVE-2026-48282ncsc-nl2026-07-01

Multiple vulnerabilities in Adobe ColdFusion (July 1, 2026)

unknownCVE-2026-48307 CVE-2026-48281 CVE-2026-48315 CVE-2026-48283cert-fr-avis2026-07-01

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-63)

unknownjpcert2026-06-10

CVE-2009-3459: Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability

criticalexploitedCVE-2009-3459cisa-kev2026-05-20

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-44)

unknownjpcert2026-04-15

CVE-2020-9715: Adobe Acrobat Use-After-Free Vulnerability

criticalexploitedCVE-2020-9715cisa-kev2026-04-13

CVE-2026-34621: Adobe Acrobat and Reader Prototype Pollution Vulnerability

criticalexploitedCVE-2026-34621cisa-kev2026-04-13

CVE-2025-54236: Adobe Commerce and Magento Improper Input Validation Vulnerability

criticalexploitedCVE-2025-54236cisa-kev2025-10-24

CVE-2025-54253: Adobe Experience Manager Forms Code Execution Vulnerability

criticalexploitedCVE-2025-54253cisa-kev2025-10-15

CVE-2017-3066: Adobe ColdFusion Deserialization Vulnerability

criticalexploitedCVE-2017-3066cisa-kev2025-02-24

CVE-2024-20767: Adobe ColdFusion Improper Access Control Vulnerability

criticalexploitedCVE-2024-20767cisa-kev2024-12-16

CVE-2013-0648: Adobe Flash Player Code Execution Vulnerability

criticalexploitedCVE-2013-0648cisa-kev2024-09-17

CVE-2014-0497: Adobe Flash Player Integer Underflow Vulnerablity

criticalexploitedCVE-2014-0497cisa-kev2024-09-17

CVE-2013-0643: Adobe Flash Player Incorrect Default Permissions Vulnerability

criticalexploitedCVE-2013-0643cisa-kev2024-09-17

CVE-2014-0502: Adobe Flash Player Double Free Vulnerablity

criticalexploitedCVE-2014-0502cisa-kev2024-09-17

CVE-2024-34102: Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability

criticalexploitedCVE-2024-34102cisa-kev2024-07-17

CVE-2023-29300: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

criticalexploitedCVE-2023-29300cisa-kev2024-01-08

CVE-2023-38203: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

criticalexploitedCVE-2023-38203cisa-kev2024-01-08

CVE-2023-21608: Adobe Acrobat and Reader Use-After-Free Vulnerability

criticalexploitedCVE-2023-21608cisa-kev2023-10-10

CVE-2023-26369: Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability

criticalexploitedCVE-2023-26369cisa-kev2023-09-14

CVE-2023-26359: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

criticalexploitedCVE-2023-26359cisa-kev2023-08-21

CVE-2023-38205: Adobe ColdFusion Improper Access Control Vulnerability

criticalexploitedCVE-2023-38205cisa-kev2023-07-20

CVE-2023-29298: Adobe ColdFusion Improper Access Control Vulnerability

criticalexploitedCVE-2023-29298cisa-kev2023-07-20

CVE-2023-26360: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

criticalexploitedCVE-2023-26360cisa-kev2023-03-15

CVE-2012-5054: Adobe Flash Player Integer Overflow Vulnerability

criticalexploitedCVE-2012-5054cisa-kev2022-06-08

CVE-2012-0754: Adobe Flash Player Memory Corruption Vulnerability

criticalexploitedCVE-2012-0754cisa-kev2022-06-08

CVE-2009-4324: Adobe Acrobat and Reader Use-After-Free Vulnerability

criticalexploitedCVE-2009-4324cisa-kev2022-06-08

CVE-2012-0767: Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability

criticalexploitedCVE-2012-0767cisa-kev2022-06-08

CVE-2011-2462: Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability

criticalexploitedCVE-2011-2462cisa-kev2022-06-08

CVE-2009-1862: Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability

criticalexploitedCVE-2009-1862cisa-kev2022-06-08

CVE-2010-1297: Adobe Flash Player Memory Corruption Vulnerability

criticalexploitedCVE-2010-1297cisa-kev2022-06-08

CVE-2008-0655: Adobe Acrobat and Reader Unspecified Vulnerability

criticalexploitedCVE-2008-0655cisa-kev2022-06-08

CVE-2010-2883: Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability

criticalexploitedCVE-2010-2883cisa-kev2022-06-08

CVE-2011-0609: Adobe Flash Player Unspecified Vulnerability

criticalexploitedCVE-2011-0609cisa-kev2022-06-08

CVE-2009-3953: Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability

criticalexploitedCVE-2009-3953cisa-kev2022-06-08

CVE-2018-4990: Adobe Acrobat and Reader Double Free Vulnerability

criticalexploitedCVE-2018-4990cisa-kev2022-06-08

CVE-2007-5659: Adobe Acrobat and Reader Buffer Overflow Vulnerability

criticalexploitedCVE-2007-5659cisa-kev2022-06-08

CVE-2014-8439: Adobe Flash Player Dereferenced Pointer Vulnerability

criticalexploitedCVE-2014-8439cisa-kev2022-05-25

CVE-2015-0310: Adobe Flash Player ASLR Bypass Vulnerability

criticalexploitedCVE-2015-0310cisa-kev2022-05-25

CVE-2014-0546: Adobe Reader and Acrobat Sandbox Bypass Vulnerability

criticalexploitedCVE-2014-0546cisa-kev2022-05-25

CVE-2016-0984: Adobe Flash Player and AIR Use-After-Free Vulnerability

criticalexploitedCVE-2016-0984cisa-kev2022-05-25

CVE-2015-8651: Adobe Flash Player Integer Overflow Vulnerability

criticalexploitedCVE-2015-8651cisa-kev2022-05-25

CVE-2016-1010: Adobe Flash Player and AIR Integer Overflow Vulnerability

criticalexploitedCVE-2016-1010cisa-kev2022-05-25

CVE-2018-5002: Adobe Flash Player Stack-based Buffer Overflow Vulnerability

criticalexploitedCVE-2018-5002cisa-kev2022-05-23

CVE-2015-5123: Adobe Flash Player Use-After-Free Vulnerability

criticalexploitedCVE-2015-5123cisa-kev2022-04-13

CVE-2015-5122: Adobe Flash Player Use-After-Free Vulnerability

criticalexploitedCVE-2015-5122cisa-kev2022-04-13

CVE-2014-9163: Adobe Flash Player Stack-Based Buffer Overflow Vulnerability

criticalexploitedCVE-2014-9163cisa-kev2022-04-13

CVE-2015-3113: Adobe Flash Player Heap-Based Buffer Overflow Vulnerability

criticalexploitedCVE-2015-3113cisa-kev2022-04-13

CVE-2015-0311: Adobe Flash Player Remote Code Execution Vulnerability

criticalexploitedCVE-2015-0311cisa-kev2022-04-13

CVE-2015-0313: Adobe Flash Player Use-After-Free Vulnerability

criticalexploitedCVE-2015-0313cisa-kev2022-04-13

CVE-2012-2034: Adobe Flash Player Memory Corruption Vulnerability

criticalexploitedCVE-2012-2034cisa-kev2022-03-28

CVE-2013-2729: Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability

criticalexploitedCVE-2013-2729cisa-kev2022-03-28

CVE-2009-0927: Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability

criticalexploitedCVE-2009-0927cisa-kev2022-03-25

CVE-2016-7892: Adobe Flash Player Use-After-Free Vulnerability

criticalexploitedCVE-2016-7892cisa-kev2022-03-25

CVE-2016-4171: Adobe Flash Player Remote Code Execution Vulnerability

criticalexploitedCVE-2016-4171cisa-kev2022-03-25

CVE-2010-2861: Adobe ColdFusion Directory Traversal Vulnerability

criticalexploitedCVE-2010-2861cisa-kev2022-03-25

CVE-2013-0631: Adobe ColdFusion Information Disclosure Vulnerability

criticalexploitedCVE-2013-0631cisa-kev2022-03-07

CVE-2013-0625: Adobe ColdFusion Authentication Bypass Vulnerability

criticalexploitedCVE-2013-0625cisa-kev2022-03-07

CVE-2009-3960: Adobe BlazeDS Information Disclosure Vulnerability

criticalexploitedCVE-2009-3960cisa-kev2022-03-07

CVE-2013-0629: Adobe ColdFusion Directory Traversal Vulnerability

criticalexploitedCVE-2013-0629cisa-kev2022-03-07

CVE-2013-0632: Adobe ColdFusion Authentication Bypass Vulnerability

criticalexploitedCVE-2013-0632cisa-kev2022-03-03

CVE-2015-3043: Adobe Flash Player Memory Corruption Vulnerability

criticalexploitedCVE-2015-3043cisa-kev2022-03-03

CVE-2016-4117: Adobe Flash Player Arbitrary Code Execution Vulnerability

criticalexploitedCVE-2016-4117cisa-kev2022-03-03

CVE-2012-1535: Adobe Flash Player Arbitrary Code Execution Vulnerability

criticalexploitedCVE-2012-1535cisa-kev2022-03-03

CVE-2010-0188: Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability

criticalexploitedCVE-2010-0188cisa-kev2022-03-03

CVE-2015-5119: Adobe Flash Player Use-After-Free Vulnerability

criticalexploitedCVE-2015-5119cisa-kev2022-03-03

CVE-2014-0496: Adobe Reader and Acrobat Use-After-Free Vulnerability

criticalexploitedCVE-2014-0496cisa-kev2022-03-03

CVE-2008-2992: Adobe Reader and Acrobat Input Validation Vulnerability

criticalexploitedCVE-2008-2992cisa-kev2022-03-03

CVE-2016-1019: Adobe Flash Player Arbitrary Code Execution Vulnerability

criticalexploitedCVE-2016-1019cisa-kev2022-03-03

CVE-2013-0641: Adobe Reader Buffer Overflow Vulnerability

criticalexploitedCVE-2013-0641cisa-kev2022-03-03

CVE-2011-0611: Adobe Flash Player Remote Code Execution Vulnerability

criticalexploitedCVE-2011-0611cisa-kev2022-03-03

CVE-2013-0640: Adobe Reader and Acrobat Memory Corruption Vulnerability

criticalexploitedCVE-2013-0640cisa-kev2022-03-03

CVE-2013-3346: Adobe Reader and Acrobat Memory Corruption Vulnerability

criticalexploitedCVE-2013-3346cisa-kev2022-03-03

CVE-2016-7855: Adobe Flash Player Use-After-Free Vulnerability

criticalexploitedCVE-2016-7855cisa-kev2022-03-03

CVE-2015-7645: Adobe Flash Player Arbitrary Code Execution Vulnerability

criticalexploitedCVE-2015-7645cisa-kev2022-03-03

CVE-2017-11292: Adobe Flash Player Type Confusion Vulnerability

criticalexploitedCVE-2017-11292cisa-kev2022-03-03

CVE-2022-24086: Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability

criticalexploitedCVE-2022-24086cisa-kev2022-02-15

CVE-2018-15982: Adobe Flash Player Use-After-Free Vulnerability

criticalexploitedCVE-2018-15982cisa-kev2022-02-15

CVE-2021-21017: Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability

criticalexploitedCVE-2021-21017cisa-kev2021-11-03

CVE-2021-28550: Adobe Acrobat and Reader Use-After-Free Vulnerability

criticalexploitedCVE-2021-28550cisa-kev2021-11-03

CVE-2018-4878: Adobe Flash Player Use-After-Free Vulnerability

criticalexploitedCVE-2018-4878cisa-kev2021-11-03

CVE-2018-15961: Adobe ColdFusion Unrestricted File Upload Vulnerability

criticalexploitedCVE-2018-15961cisa-kev2021-11-03

CVE-2018-4939: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

criticalexploitedCVE-2018-4939cisa-kev2021-11-03