Security Digest
Adobe: known exploited vulnerabilities
18 Adobe CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-09-24 | CVE-2026-71362 | Adobe Commerce and Magento Adobe Commerce and Magento Incorrect Authorization Vulnerability | 2026-09-27 |
| 2026-09-08 | CVE-2026-75650 | Adobe Commerce and Magento Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability | 2026-09-11 |
| 2026-07-07 | CVE-2026-48282 | Adobe ColdFusion Adobe ColdFusion Path Traversal Vulnerability | 2026-07-10 |
| 2026-05-20 | CVE-2009-3459 | Adobe Acrobat and Reader Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability | 2026-06-03 |
| 2026-04-13 | CVE-2026-34621 | Adobe Acrobat and Reader Adobe Acrobat and Reader Prototype Pollution Vulnerability | 2026-04-27 |
| 2026-04-13 | CVE-2020-9715 | Adobe Acrobat Adobe Acrobat Use-After-Free Vulnerability | 2026-04-27 |
| 2025-10-24 | CVE-2025-54236 | Adobe Commerce and Magento Adobe Commerce and Magento Improper Input Validation Vulnerability | 2025-11-14 |
| 2025-10-15 | CVE-2025-54253 | Adobe Experience Manager (AEM) Forms Adobe Experience Manager Forms Code Execution Vulnerability | 2025-11-05 |
| 2025-02-24 | CVE-2017-3066 | Adobe ColdFusion Adobe ColdFusion Deserialization Vulnerability | 2025-03-17 |
| 2024-12-16 | CVE-2024-20767 | Adobe ColdFusion Adobe ColdFusion Improper Access Control Vulnerability | 2025-01-06 |
| 2024-09-17 | CVE-2014-0502 | Adobe Flash Player Adobe Flash Player Double Free Vulnerablity | 2024-10-08 |
| 2024-09-17 | CVE-2014-0497 | Adobe Flash Player Adobe Flash Player Integer Underflow Vulnerablity | 2024-10-08 |
| 2024-09-17 | CVE-2013-0648 | Adobe Flash Player Adobe Flash Player Code Execution Vulnerability | 2024-10-08 |
| 2024-09-17 | CVE-2013-0643 | Adobe Flash Player Adobe Flash Player Incorrect Default Permissions Vulnerability | 2024-10-08 |
| 2024-07-17 | CVE-2024-34102 | Adobe Commerce and Magento Open Source Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability | 2024-08-07 |
| 2024-01-08 | CVE-2023-38203 | Adobe ColdFusion Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Ransomware | 2024-01-29 |
| 2024-01-08 | CVE-2023-29300 | Adobe ColdFusion Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Ransomware | 2024-01-29 |
| 2023-10-10 | CVE-2023-21608 | Adobe Acrobat and Reader Adobe Acrobat and Reader Use-After-Free Vulnerability | 2023-10-31 |