News stories · 30d
4
Advisories · 30d
9
Added to KEV · 90d
2
Actively exploited (CISA KEV)
| Added | CVE | Product | Vulnerability | Ransomware |
|---|---|---|---|---|
| 2026-09-24 | CVE-2026-71362 | Commerce and Magento | Adobe Commerce and Magento Incorrect Authorization Vulnerability | |
| 2026-09-08 | CVE-2026-75650 | Commerce and Magento | Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability | |
| 2026-07-07 | CVE-2026-48282 | ColdFusion | Adobe ColdFusion Path Traversal Vulnerability | |
| 2026-05-20 | CVE-2009-3459 | Acrobat and Reader | Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability | |
| 2026-04-13 | CVE-2020-9715 | Acrobat | Adobe Acrobat Use-After-Free Vulnerability | |
| 2026-04-13 | CVE-2026-34621 | Acrobat and Reader | Adobe Acrobat and Reader Prototype Pollution Vulnerability | |
| 2025-10-24 | CVE-2025-54236 | Commerce and Magento | Adobe Commerce and Magento Improper Input Validation Vulnerability | |
| 2025-10-15 | CVE-2025-54253 | Experience Manager (AEM) Forms | Adobe Experience Manager Forms Code Execution Vulnerability | |
| 2025-02-24 | CVE-2017-3066 | ColdFusion | Adobe ColdFusion Deserialization Vulnerability | |
| 2024-12-16 | CVE-2024-20767 | ColdFusion | Adobe ColdFusion Improper Access Control Vulnerability | |
| 2024-09-17 | CVE-2014-0502 | Flash Player | Adobe Flash Player Double Free Vulnerablity | |
| 2024-09-17 | CVE-2013-0648 | Flash Player | Adobe Flash Player Code Execution Vulnerability | |
| 2024-09-17 | CVE-2013-0643 | Flash Player | Adobe Flash Player Incorrect Default Permissions Vulnerability | |
| 2024-09-17 | CVE-2014-0497 | Flash Player | Adobe Flash Player Integer Underflow Vulnerablity | |
| 2024-07-17 | CVE-2024-34102 | Commerce and Magento Open Source | Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability | |
| 2024-01-08 | CVE-2023-29300 | ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | Known |
| 2024-01-08 | CVE-2023-38203 | ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | Known |
| 2023-10-10 | CVE-2023-21608 | Acrobat and Reader | Adobe Acrobat and Reader Use-After-Free Vulnerability | |
| 2023-09-14 | CVE-2023-26369 | Acrobat and Reader | Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability | |
| 2023-08-21 | CVE-2023-26359 | ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | |
| 2023-07-20 | CVE-2023-29298 | ColdFusion | Adobe ColdFusion Improper Access Control Vulnerability | |
| 2023-07-20 | CVE-2023-38205 | ColdFusion | Adobe ColdFusion Improper Access Control Vulnerability | |
| 2023-03-15 | CVE-2023-26360 | ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | |
| 2022-06-08 | CVE-2018-4990 | Acrobat and Reader | Adobe Acrobat and Reader Double Free Vulnerability | |
| 2022-06-08 | CVE-2012-5054 | Flash Player | Adobe Flash Player Integer Overflow Vulnerability |
Timeline (last 30 days)
- Critical BlockStrap flaw lets hackers run code on Magento servers — BleepingComputer, 2026-10-16
- Critical Adobe Acrobat Flaw Lets Malicious PDFs Trigger One-Click Memory Corruption — Cybersecurity News, 2026-10-16
- ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More — The Hacker News, 2026-10-15
- ZDI-26-778: Adobe Photoshop DCM Pixel Data Parsing Integer Overflow Remote Code Execution Vulnerability — ZDI Published Advisories, 2026-10-15
- ZDI-26-777: Adobe Photoshop AdobePDFL PDF JPEG Parsing Integer Overflow Remote Code Execution Vulnerability — ZDI Published Advisories, 2026-10-15
- Adobe Patches 176 Vulnerabilities Across 11 Products — SecurityWeek, 2026-10-13
- Microsoft, Adobe, Apple, and Foxit vulnerabilities — 0dayfans, 2026-10-07
- APSB26-147 : Security update available for Adobe Content Credentials — Adobe Security Bulletins, 2026-09-22
- APSB26-148 : Security update available for Adobe Bridge — Adobe Security Bulletins, 2026-09-22
- APSB26-150 : Security update available for Adobe Connect — Adobe Security Bulletins, 2026-09-22
- APSB26-151 : Security update available for Adobe Experience Manager Forms JEE — Adobe Security Bulletins, 2026-09-22
- APSB26-155 : Security update available for Adobe Substance 3D Modeler — Adobe Security Bulletins, 2026-09-22
- APSB26-157 : Security update available for Adobe Premiere Pro — Adobe Security Bulletins, 2026-09-22