Vendor CVEs

Adobe Inc.

All CVEs

7,262 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2016-1013	Adobe Inc. Air SDK	Hig	0.62	8.8	0.23		Apr 9, 2016	Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011,…
CVE-2016-1011	Adobe Inc. Air SDK	Hig	0.62	8.8	0.26		Apr 9, 2016	Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1013,…
CVE-2016-1002	Adobe Inc. Air	Hig	0.62	8.8	0.21		Mar 12, 2016	Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary…
CVE-2016-1001	Adobe Inc. Air	Hig	0.62	8.8	0.26		Mar 12, 2016	Heap-based buffer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows…
CVE-2016-0985	Adobe Inc. Air SDK	Hig	0.62	8.8	0.27		Feb 10, 2016	Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code…
CVE-2016-0967	Adobe Inc. Air SDK	Hig	0.62	8.8	0.21		Feb 10, 2016	Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code…
CVE-2016-0965	Adobe Inc. Air SDK	Hig	0.62	8.8	0.21		Feb 10, 2016	Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code…
CVE-2016-0964	Adobe Inc. Air SDK	Hig	0.62	8.8	0.21		Feb 10, 2016	Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code…
CVE-2015-8644	Adobe Inc. Air	Hig	0.62	8.8	0.27		Dec 28, 2015	Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allow attackers to execute arbitrary code…
CVE-2015-8636	Adobe Inc. Air	Hig	0.62	8.8	0.22		Dec 28, 2015	Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allow attackers to execute arbitrary code…
CVE-2015-8635	Adobe Inc. Air	Hig	0.62	8.8	0.27		Dec 28, 2015	Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows…
CVE-2015-8634	Adobe Inc. Air	Hig	0.62	8.8	0.27		Dec 28, 2015	Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows…
CVE-2010-1280	Adobe Inc. Shockwave Player	Hig	0.62	8.8	0.17		May 13, 2010	Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file, related to (1) an erroneous dereference and (2) a certain Shock.dir file.
CVE-2026-34615	Adobe Inc. Connect	Cri	0.61	9.3	0.01		Apr 14, 2026	Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a…
CVE-2018-4904	Adobe Inc. Acrobat	Hig	0.61	8.8	0.44		Feb 27, 2018	An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability. The vulnerability is triggered by crafted TIFF data…
CVE-2017-3006	Adobe Inc. Creative Cloud	Hig	0.61	8.8	0.11		Apr 12, 2017	Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource permissions during the installation of Creative Cloud desktop applications.
CVE-2012-2034	Adobe Inc. Air	Hig	0.61	7.5	0.08	KEV	Jun 9, 2012	Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows…
CVE-2009-0658	Adobe Inc. Acrobat	Hig	0.61	7.8	0.88		Feb 20, 2009	Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF document, related to a non-JavaScript function call and possibly an embedded JBIG2 image stream, as exploited in the wild in February…
CVE-2026-34691	Adobe Inc. Experience Manager	Cri	0.60	9.3	0.00		Jun 9, 2026	Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a…
CVE-2026-34660	Adobe Inc. Connect	Cri	0.60	9.3	0.00		May 12, 2026	Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web…
CVE-2026-27304	Adobe Inc. Coldfusion	Cri	0.60	9.3	0.04		Apr 14, 2026	ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.
CVE-2026-27246	Adobe Inc. Connect	Cri	0.60	9.3	0.00		Apr 14, 2026	Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's…
CVE-2026-27245	Adobe Inc. Connect	Cri	0.60	9.3	0.00		Apr 14, 2026	Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's…
CVE-2026-27243	Adobe Inc. Connect	Cri	0.60	9.3	0.00		Apr 14, 2026	Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's…
CVE-2018-5065	Adobe Inc. Acrobat	Hig	0.60	8.8	0.32		Jul 20, 2018	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-4982	Adobe Inc. Acrobat	Hig	0.60	8.8	0.32		Jul 9, 2018	Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-4923	Adobe Inc. Connect	Cri	0.60	9.1	0.10		May 19, 2018	Adobe Connect versions 9.7 and earlier have an exploitable OS Command Injection. Successful exploitation could lead to arbitrary file deletion.
CVE-2018-4910	Adobe Inc. Acrobat Reader Dc	Hig	0.60	8.8	0.29		Feb 27, 2018	An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability in the JavaScript engine. The vulnerability is…
CVE-2018-4890	Adobe Inc. Acrobat Reader Dc	Hig	0.60	8.8	0.29		Feb 27, 2018	An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability in the image conversion engine, when handling JPEG…
CVE-2018-5007	Adobe Inc. Flashplayer	Hig	0.59	8.8	0.18		Jul 20, 2018	Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-4993	Adobe Inc. Acrobat	Hig	0.59	7.5	0.87		Jul 9, 2018	Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an NTLM SSO hash theft vulnerability. Successful exploitation could lead to information disclosure.
CVE-2018-4901	Adobe Inc. Acrobat Reader Dc	Hig	0.59	8.8	0.17		Feb 27, 2018	An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is…
CVE-2017-16393	Adobe Inc. Acrobat	Hig	0.59	8.8	0.17		Dec 9, 2017	An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the…
CVE-2017-3117	Adobe Inc. Acrobat	Hig	0.59	8.8	0.19		Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the plugin that handles links within the PDF. Successful exploitation could lead to arbitrary code…
CVE-2017-11263	Adobe Inc. Acrobat	Hig	0.59	8.8	0.26		Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the internal data structure manipulation related to document encoding. Successful exploitation…
CVE-2017-11211	Adobe Inc. Acrobat	Hig	0.59	8.8	0.27		Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the JPEG parser. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2989	Adobe Inc. Campaign	Cri	0.59	9.1	0.04		Apr 12, 2017	Adobe Campaign versions Build 8770 and earlier have an input validation bypass that could be exploited to read, write, or delete data from the Campaign database.
CVE-2017-2984	Adobe Inc. Flash Player Desktop Runtime	Hig	0.59	8.8	0.18		Feb 15, 2017	Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder routine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2968	Adobe Inc. Campaign	Cri	0.59	9.1	0.03		Feb 15, 2017	Adobe Campaign versions 16.4 Build 8724 and earlier have a code injection vulnerability.
CVE-2016-1034	Adobe Inc. Creative Cloud	Cri	0.59	9.1	0.03		Apr 12, 2016	The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before 3.6.0.244 allows remote attackers to read or write to arbitrary files via unspecified vectors.
CVE-2018-12799	Adobe Inc. Acrobat	Hig	0.58	8.8	0.07		Aug 29, 2018	Adobe Acrobat and Reader versions 2018.011.20055 and earlier, 2017.011.30096 and earlier, and 2015.006.30434 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-5067	Adobe Inc. Acrobat Reader Dc	Hig	0.58	8.8	0.14		Jul 20, 2018	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-5059	Adobe Inc. Acrobat	Hig	0.58	8.8	0.08		Jul 20, 2018	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-5058	Adobe Inc. Acrobat	Hig	0.58	8.8	0.14		Jul 20, 2018	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-5057	Adobe Inc. Acrobat Reader Dc	Hig	0.58	8.8	0.09		Jul 20, 2018	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-5052	Adobe Inc. Acrobat	Hig	0.58	8.8	0.14		Jul 20, 2018	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-5045	Adobe Inc. Acrobat	Hig	0.58	8.8	0.14		Jul 20, 2018	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-5043	Adobe Inc. Acrobat	Hig	0.58	8.8	0.09		Jul 20, 2018	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Buffer Errors vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-5042	Adobe Inc. Acrobat	Hig	0.58	8.8	0.08		Jul 20, 2018	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-5041	Adobe Inc. Acrobat	Hig	0.58	8.8	0.14		Jul 20, 2018	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

CVE-2016-1013HigApr 9, 2016
Adobe Inc.
Air SDK
risk 0.62cvss 8.8epss 0.23
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011,…
CVE-2016-1011HigApr 9, 2016
Adobe Inc.
Air SDK
risk 0.62cvss 8.8epss 0.26
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1013,…
CVE-2016-1002HigMar 12, 2016
Adobe Inc.
Air
risk 0.62cvss 8.8epss 0.21
Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary…
CVE-2016-1001HigMar 12, 2016
Adobe Inc.
Air
risk 0.62cvss 8.8epss 0.26
Heap-based buffer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows…
CVE-2016-0985HigFeb 10, 2016
Adobe Inc.
Air SDK
risk 0.62cvss 8.8epss 0.27
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code…
CVE-2016-0967HigFeb 10, 2016
Adobe Inc.
Air SDK
risk 0.62cvss 8.8epss 0.21
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code…
CVE-2016-0965HigFeb 10, 2016
Adobe Inc.
Air SDK
risk 0.62cvss 8.8epss 0.21
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code…
CVE-2016-0964HigFeb 10, 2016
Adobe Inc.
Air SDK
risk 0.62cvss 8.8epss 0.21
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code…
CVE-2015-8644HigDec 28, 2015
Adobe Inc.
Air
risk 0.62cvss 8.8epss 0.27
Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allow attackers to execute arbitrary code…
CVE-2015-8636HigDec 28, 2015
Adobe Inc.
Air
risk 0.62cvss 8.8epss 0.22
Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allow attackers to execute arbitrary code…
CVE-2015-8635HigDec 28, 2015
Adobe Inc.
Air
risk 0.62cvss 8.8epss 0.27
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows…
CVE-2015-8634HigDec 28, 2015
Adobe Inc.
Air
risk 0.62cvss 8.8epss 0.27
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows…
CVE-2010-1280HigMay 13, 2010
Adobe Inc.
Shockwave Player
risk 0.62cvss 8.8epss 0.17
Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file, related to (1) an erroneous dereference and (2) a certain Shock.dir file.
CVE-2026-34615CriApr 14, 2026
Adobe Inc.
Connect
risk 0.61cvss 9.3epss 0.01
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a…
CVE-2018-4904HigFeb 27, 2018
Adobe Inc.
Acrobat
risk 0.61cvss 8.8epss 0.44
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability. The vulnerability is triggered by crafted TIFF data…
CVE-2017-3006HigApr 12, 2017
Adobe Inc.
Creative Cloud
risk 0.61cvss 8.8epss 0.11
Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource permissions during the installation of Creative Cloud desktop applications.
CVE-2012-2034HigKEVJun 9, 2012
Adobe Inc.
Air
risk 0.61cvss 7.5epss 0.08
Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows…
CVE-2009-0658HigFeb 20, 2009
Adobe Inc.
Acrobat
risk 0.61cvss 7.8epss 0.88
Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF document, related to a non-JavaScript function call and possibly an embedded JBIG2 image stream, as exploited in the wild in February…
CVE-2026-34691CriJun 9, 2026
Adobe Inc.
Experience Manager
risk 0.60cvss 9.3epss 0.00
Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a…
CVE-2026-34660CriMay 12, 2026
Adobe Inc.
Connect
risk 0.60cvss 9.3epss 0.00
Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web…
CVE-2026-27304CriApr 14, 2026
Adobe Inc.
Coldfusion
risk 0.60cvss 9.3epss 0.04
ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.
CVE-2026-27246CriApr 14, 2026
Adobe Inc.
Connect
risk 0.60cvss 9.3epss 0.00
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's…
CVE-2026-27245CriApr 14, 2026
Adobe Inc.
Connect
risk 0.60cvss 9.3epss 0.00
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's…
CVE-2026-27243CriApr 14, 2026
Adobe Inc.
Connect
risk 0.60cvss 9.3epss 0.00
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's…
CVE-2018-5065HigJul 20, 2018
Adobe Inc.
Acrobat
risk 0.60cvss 8.8epss 0.32
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-4982HigJul 9, 2018
Adobe Inc.
Acrobat
risk 0.60cvss 8.8epss 0.32
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-4923CriMay 19, 2018
Adobe Inc.
Connect
risk 0.60cvss 9.1epss 0.10
Adobe Connect versions 9.7 and earlier have an exploitable OS Command Injection. Successful exploitation could lead to arbitrary file deletion.
CVE-2018-4910HigFeb 27, 2018
Adobe Inc.
Acrobat Reader Dc
risk 0.60cvss 8.8epss 0.29
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability in the JavaScript engine. The vulnerability is…
CVE-2018-4890HigFeb 27, 2018
Adobe Inc.
Acrobat Reader Dc
risk 0.60cvss 8.8epss 0.29
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability in the image conversion engine, when handling JPEG…
CVE-2018-5007HigJul 20, 2018
Adobe Inc.
Flashplayer
risk 0.59cvss 8.8epss 0.18
Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-4993HigJul 9, 2018
Adobe Inc.
Acrobat
risk 0.59cvss 7.5epss 0.87
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an NTLM SSO hash theft vulnerability. Successful exploitation could lead to information disclosure.
CVE-2018-4901HigFeb 27, 2018
Adobe Inc.
Acrobat Reader Dc
risk 0.59cvss 8.8epss 0.17
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intended buffer; the computation is…
CVE-2017-16393HigDec 9, 2017
Adobe Inc.
Acrobat
risk 0.59cvss 8.8epss 0.17
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the…
CVE-2017-3117HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.59cvss 8.8epss 0.19
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the plugin that handles links within the PDF. Successful exploitation could lead to arbitrary code…
CVE-2017-11263HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.59cvss 8.8epss 0.26
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the internal data structure manipulation related to document encoding. Successful exploitation…
CVE-2017-11211HigAug 11, 2017
Adobe Inc.
Acrobat
risk 0.59cvss 8.8epss 0.27
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the JPEG parser. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2989CriApr 12, 2017
Adobe Inc.
Campaign
risk 0.59cvss 9.1epss 0.04
Adobe Campaign versions Build 8770 and earlier have an input validation bypass that could be exploited to read, write, or delete data from the Campaign database.
CVE-2017-2984HigFeb 15, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.59cvss 8.8epss 0.18
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder routine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-2968CriFeb 15, 2017
Adobe Inc.
Campaign
risk 0.59cvss 9.1epss 0.03
Adobe Campaign versions 16.4 Build 8724 and earlier have a code injection vulnerability.
CVE-2016-1034CriApr 12, 2016
Adobe Inc.
Creative Cloud
risk 0.59cvss 9.1epss 0.03
The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before 3.6.0.244 allows remote attackers to read or write to arbitrary files via unspecified vectors.
CVE-2018-12799HigAug 29, 2018
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.07
Adobe Acrobat and Reader versions 2018.011.20055 and earlier, 2017.011.30096 and earlier, and 2015.006.30434 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-5067HigJul 20, 2018
Adobe Inc.
Acrobat Reader Dc
risk 0.58cvss 8.8epss 0.14
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-5059HigJul 20, 2018
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.08
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-5058HigJul 20, 2018
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.14
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-5057HigJul 20, 2018
Adobe Inc.
Acrobat Reader Dc
risk 0.58cvss 8.8epss 0.09
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-5052HigJul 20, 2018
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.14
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-5045HigJul 20, 2018
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.14
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-5043HigJul 20, 2018
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.09
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Buffer Errors vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-5042HigJul 20, 2018
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.08
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVE-2018-5041HigJul 20, 2018
Adobe Inc.
Acrobat
risk 0.58cvss 8.8epss 0.14
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Page 10 of 146