---
title: "Adobe: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/adobe/
description: "Every Adobe vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (18), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-09-24
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Adobe: known exploited vulnerabilities

- 2026-09-24 [CVE-2026-71362](https://erroneo.us/security/cve/CVE-2026-71362/index.md) Adobe Commerce and Magento : Adobe Commerce and Magento Incorrect Authorization Vulnerability  (due 2026-09-27; ransomware: Unknown)
- 2026-09-08 [CVE-2026-75650](https://erroneo.us/security/cve/CVE-2026-75650/index.md) Adobe Commerce and Magento: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability (due 2026-09-11; ransomware: Unknown)
- 2026-07-07 [CVE-2026-48282](https://erroneo.us/security/cve/CVE-2026-48282/index.md) Adobe ColdFusion: Adobe ColdFusion Path Traversal Vulnerability (due 2026-07-10; ransomware: Unknown)
- 2026-05-20 [CVE-2009-3459](https://erroneo.us/security/cve/CVE-2009-3459/index.md) Adobe Acrobat and Reader: Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability (due 2026-06-03; ransomware: Unknown)
- 2026-04-13 [CVE-2026-34621](https://erroneo.us/security/cve/CVE-2026-34621/index.md) Adobe Acrobat and Reader: Adobe Acrobat and Reader Prototype Pollution Vulnerability (due 2026-04-27; ransomware: Unknown)
- 2026-04-13 [CVE-2020-9715](https://erroneo.us/security/cve/CVE-2020-9715/index.md) Adobe Acrobat: Adobe Acrobat Use-After-Free Vulnerability (due 2026-04-27; ransomware: Unknown)
- 2025-10-24 [CVE-2025-54236](https://erroneo.us/security/cve/CVE-2025-54236/index.md) Adobe Commerce and Magento: Adobe Commerce and Magento Improper Input Validation Vulnerability (due 2025-11-14; ransomware: Unknown)
- 2025-10-15 [CVE-2025-54253](https://erroneo.us/security/cve/CVE-2025-54253/index.md) Adobe Experience Manager (AEM) Forms: Adobe Experience Manager Forms Code Execution Vulnerability (due 2025-11-05; ransomware: Unknown)
- 2025-02-24 [CVE-2017-3066](https://erroneo.us/security/cve/CVE-2017-3066/index.md) Adobe ColdFusion: Adobe ColdFusion Deserialization Vulnerability (due 2025-03-17; ransomware: Unknown)
- 2024-12-16 [CVE-2024-20767](https://erroneo.us/security/cve/CVE-2024-20767/index.md) Adobe ColdFusion: Adobe ColdFusion Improper Access Control Vulnerability (due 2025-01-06; ransomware: Unknown)
- 2024-09-17 [CVE-2014-0502](https://erroneo.us/security/cve/CVE-2014-0502/index.md) Adobe Flash Player: Adobe Flash Player Double Free Vulnerablity (due 2024-10-08; ransomware: Unknown)
- 2024-09-17 [CVE-2014-0497](https://erroneo.us/security/cve/CVE-2014-0497/index.md) Adobe Flash Player: Adobe Flash Player Integer Underflow Vulnerablity (due 2024-10-08; ransomware: Unknown)
- 2024-09-17 [CVE-2013-0648](https://erroneo.us/security/cve/CVE-2013-0648/index.md) Adobe Flash Player: Adobe Flash Player Code Execution Vulnerability (due 2024-10-08; ransomware: Unknown)
- 2024-09-17 [CVE-2013-0643](https://erroneo.us/security/cve/CVE-2013-0643/index.md) Adobe Flash Player: Adobe Flash Player Incorrect Default Permissions Vulnerability (due 2024-10-08; ransomware: Unknown)
- 2024-07-17 [CVE-2024-34102](https://erroneo.us/security/cve/CVE-2024-34102/index.md) Adobe Commerce and Magento Open Source: Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability (due 2024-08-07; ransomware: Unknown)
- 2024-01-08 [CVE-2023-38203](https://erroneo.us/security/cve/CVE-2023-38203/index.md) Adobe ColdFusion: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability (due 2024-01-29; ransomware: Known)
- 2024-01-08 [CVE-2023-29300](https://erroneo.us/security/cve/CVE-2023-29300/index.md) Adobe ColdFusion: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability (due 2024-01-29; ransomware: Known)
- 2023-10-10 [CVE-2023-21608](https://erroneo.us/security/cve/CVE-2023-21608/index.md) Adobe Acrobat and Reader: Adobe Acrobat and Reader Use-After-Free Vulnerability (due 2023-10-31; ransomware: Unknown)

---
Source page: https://erroneo.us/security/vendor/adobe/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt