Vendor CVEs

Adobe Inc.

All CVEs

7,663 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-11265	Adobe Inc. Acrobat	Med	0.43	6.5	0.05	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Adobe Graphics Manager module. Successful exploitation could lead to arbitrary code…
CVE-2017-11258	Adobe Inc. Acrobat	Med	0.43	6.5	0.05	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data and the…
CVE-2017-11255	Adobe Inc. Acrobat	Med	0.43	6.5	0.05	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing TIFF color map data. Successful exploitation could…
CVE-2017-11252	Adobe Inc. Acrobat	Med	0.43	6.5	0.05	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Adobe Graphics Manager (AGM) module. Successful exploitation could lead to arbitrary code…
CVE-2017-11249	Adobe Inc. Acrobat	Med	0.43	6.5	0.05	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when parsing an invalid Enhanced Metafile Format (EMF) record.…
CVE-2017-11248	Adobe Inc. Acrobat	Med	0.43	6.5	0.05	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to pixel…
CVE-2017-11246	Adobe Inc. Acrobat	Med	0.43	6.5	0.05	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when parsing JPEG data. Successful exploitation could lead to…
CVE-2017-11245	Adobe Inc. Acrobat	Med	0.43	6.5	0.05	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data.…
CVE-2017-11244	Adobe Inc. Acrobat	Med	0.43	6.5	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to…
CVE-2017-11243	Adobe Inc. Acrobat	Med	0.43	6.5	0.05	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the XSLT engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11242	Adobe Inc. Acrobat	Med	0.43	6.5	0.04	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to line…
CVE-2017-11239	Adobe Inc. Acrobat	Med	0.43	6.5	0.05	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to text…
CVE-2017-11238	Adobe Inc. Acrobat	Med	0.43	6.5	0.05	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to curve…
CVE-2017-11236	Adobe Inc. Acrobat	Med	0.43	6.5	0.06	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the internal handling of UTF-16 literal strings. Successful exploitation could lead to arbitrary…
CVE-2017-11233	Adobe Inc. Acrobat	Med	0.43	6.5	0.05	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to block…
CVE-2017-11232	Adobe Inc. Acrobat	Med	0.43	6.5	0.05	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability when processing Enhanced Metafile Format (EMF) data related to brush manipulation. Successful…
CVE-2017-11230	Adobe Inc. Acrobat	Med	0.43	6.5	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the JPEG 2000 engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11217	Adobe Inc. Acrobat	Med	0.43	6.5	0.06	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to…
CVE-2017-11210	Adobe Inc. Acrobat	Med	0.43	6.5	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the font parsing, where the font is embedded in the XML Paper Specification (XPS) file.…
CVE-2017-11209	Adobe Inc. Acrobat	Med	0.43	6.5	0.07	Aug 11, 2017	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability that occurs when reading a JPEG file embedded within XML Paper Specification (XPS) file. Successful…
CVE-2017-3100	Adobe Inc. Flash Player Desktop Runtime	Med	0.43	6.5	0.04	Jul 17, 2017	Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 2 BitmapData class. Successful exploitation could lead to memory address disclosure.
CVE-2017-3080	Adobe Inc. Flash Player Desktop Runtime	Med	0.43	6.5	0.04	Jul 17, 2017	Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by Internet Explorer. Successful exploitation could lead to information disclosure.
CVE-2017-3000	Adobe Inc. Flash Player Desktop Runtime	Med	0.43	6.5	0.08	Mar 14, 2017	Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding. Successful exploitation could lead to information disclosure.
CVE-2017-2938	Adobe Inc. Flashplayer	Med	0.43	6.5	0.05	Jan 11, 2017	Adobe Flash Player versions 24.0.0.186 and earlier have a security bypass vulnerability related to handling TCP connections.
CVE-2016-7851	Adobe Inc. Connect	Med	0.43	6.1	0.05	Nov 8, 2016	Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be exploited in cross-site scripting attacks.
CVE-2016-4278	Adobe Inc. Flash Player Desktop Runtime	Med	0.43	6.5	0.04	Sep 14, 2016	Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than…
CVE-2016-4277	Adobe Inc. Flash Player Desktop Runtime	Med	0.43	6.5	0.04	Sep 14, 2016	Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than…
CVE-2016-4271	Adobe Inc. Flash Player Desktop Runtime	Med	0.43	6.5	0.05	Sep 14, 2016	Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than…
CVE-2026-48411	Adobe Inc. Commerce	Med	0.42	6.5	0.00	Aug 11, 2026	Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue…
CVE-2026-48436	Adobe Inc. C2pa Web	Med	0.42	6.5	0.00	Aug 11, 2026	CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires…
CVE-2026-48375	Adobe Inc. Coldfusion	Med	0.42	6.5	0.01	Aug 11, 2026	ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service. A low-privileged attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue…
CVE-2025-54267	Adobe Inc. Commerce	Med	0.42	6.5	0.00	Oct 14, 2025	Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vulnerability. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to…
CVE-2025-54249	Adobe Inc. Experience Manager	Med	0.42	6.5	0.02	Sep 9, 2025	Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate server-side requests and bypass…
CVE-2025-54247	Adobe Inc. Experience Manager	Med	0.42	6.5	0.00	Sep 9, 2025	Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read…
CVE-2025-54246	Adobe Inc. Experience Manager	Med	0.42	6.5	0.00	Sep 9, 2025	Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write…
CVE-2025-27207	Adobe Inc. Commerce	Med	0.42	6.5	0.00	Jun 10, 2025	Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in privilege escalation. A low privileged attacker could leverage this vulnerability to bypass security measures and…
CVE-2025-24427	Adobe Inc. Commerce	Med	0.42	6.5	0.01	Feb 11, 2025	Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security…
CVE-2025-24426	Adobe Inc. Commerce	Med	0.42	6.5	0.01	Feb 11, 2025	Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security…
CVE-2025-24424	Adobe Inc. Commerce	Med	0.42	6.5	0.01	Feb 11, 2025	Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security…
CVE-2025-24422	Adobe Inc. Commerce	Med	0.42	6.5	0.01	Feb 11, 2025	Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security…
CVE-2025-24408	Adobe Inc. Commerce	Med	0.42	6.5	0.01	Feb 11, 2025	Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Information Exposure vulnerability that could result in privilege escalation. A low-privileged attacker could gain unauthorized access to sensitive information.…
CVE-2024-43729	Adobe Inc. Experience Manager	Med	0.42	6.5	0.01	Dec 10, 2024	Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a high impact on…
CVE-2024-45132	Adobe Inc. Commerce	Med	0.42	6.5	0.01	Oct 10, 2024	Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect…
CVE-2024-45118	Adobe Inc. Commerce	Med	0.42	6.5	0.01	Oct 10, 2024	Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have…
CVE-2023-22268	Adobe Inc. Robohelp	Med	0.42	6.5	0.01	Nov 17, 2023	Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to information disclosure by an low-privileged authenticated attacker. Exploitation of this issue…
CVE-2023-38209	Adobe Inc. Commerce	Med	0.42	6.5	0.01	Aug 9, 2023	Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by an Incorrect Authorization vulnerability that could lead to a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access other…
CVE-2023-29289	Adobe Inc. Commerce	Med	0.42	6.5	0.01	Jun 15, 2023	Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an XML Injection vulnerability. An attacker with low privileges can trigger a specially crafted script to a security feature bypass. Exploitation of this issue does not…
CVE-2022-42343	Adobe Inc. Campaign	Med	0.42	6.5	0.01	Dec 16, 2022	Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A low-privilege authenticated attacker can force the application to make arbitrary requests via…
CVE-2022-34256	Adobe Inc. Commerce	Hig	0.42	7.5	0.02	Aug 16, 2022	Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to access other user's data.…
CVE-2021-43762	Adobe Inc. Aem	Med	0.42	6.5	0.02	Jan 13, 2022	AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a dispatcher bypass vulnerability that could be abused to evade security controls. Sensitive areas of the web application may be exposed through exploitation of the vulnerability.

CVE-2017-11265MedAug 11, 2017
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.05
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Adobe Graphics Manager module. Successful exploitation could lead to arbitrary code…
CVE-2017-11258MedAug 11, 2017
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.05
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data and the…
CVE-2017-11255MedAug 11, 2017
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.05
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing TIFF color map data. Successful exploitation could…
CVE-2017-11252MedAug 11, 2017
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.05
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the Adobe Graphics Manager (AGM) module. Successful exploitation could lead to arbitrary code…
CVE-2017-11249MedAug 11, 2017
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.05
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when parsing an invalid Enhanced Metafile Format (EMF) record.…
CVE-2017-11248MedAug 11, 2017
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.05
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to pixel…
CVE-2017-11246MedAug 11, 2017
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.05
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when parsing JPEG data. Successful exploitation could lead to…
CVE-2017-11245MedAug 11, 2017
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.05
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) private data.…
CVE-2017-11244MedAug 11, 2017
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to…
CVE-2017-11243MedAug 11, 2017
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.05
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the XSLT engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11242MedAug 11, 2017
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.04
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to line…
CVE-2017-11239MedAug 11, 2017
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.05
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to text…
CVE-2017-11238MedAug 11, 2017
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.05
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to curve…
CVE-2017-11236MedAug 11, 2017
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.06
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the internal handling of UTF-16 literal strings. Successful exploitation could lead to arbitrary…
CVE-2017-11233MedAug 11, 2017
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.05
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to block…
CVE-2017-11232MedAug 11, 2017
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.05
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability when processing Enhanced Metafile Format (EMF) data related to brush manipulation. Successful…
CVE-2017-11230MedAug 11, 2017
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the JPEG 2000 engine. Successful exploitation could lead to arbitrary code execution.
CVE-2017-11217MedAug 11, 2017
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.06
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the image conversion engine when processing Enhanced Metafile Format (EMF) data related to…
CVE-2017-11210MedAug 11, 2017
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the font parsing, where the font is embedded in the XML Paper Specification (XPS) file.…
CVE-2017-11209MedAug 11, 2017
Adobe Inc.
Acrobat
risk 0.43cvss 6.5epss 0.07
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability that occurs when reading a JPEG file embedded within XML Paper Specification (XPS) file. Successful…
CVE-2017-3100MedJul 17, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.43cvss 6.5epss 0.04
Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 2 BitmapData class. Successful exploitation could lead to memory address disclosure.
CVE-2017-3080MedJul 17, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.43cvss 6.5epss 0.04
Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by Internet Explorer. Successful exploitation could lead to information disclosure.
CVE-2017-3000MedMar 14, 2017
Adobe Inc.
Flash Player Desktop Runtime
risk 0.43cvss 6.5epss 0.08
Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding. Successful exploitation could lead to information disclosure.
CVE-2017-2938MedJan 11, 2017
Adobe Inc.
Flashplayer
risk 0.43cvss 6.5epss 0.05
Adobe Flash Player versions 24.0.0.186 and earlier have a security bypass vulnerability related to handling TCP connections.
CVE-2016-7851MedNov 8, 2016
Adobe Inc.
Connect
risk 0.43cvss 6.1epss 0.05
Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be exploited in cross-site scripting attacks.
CVE-2016-4278MedSep 14, 2016
Adobe Inc.
Flash Player Desktop Runtime
risk 0.43cvss 6.5epss 0.04
Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than…
CVE-2016-4277MedSep 14, 2016
Adobe Inc.
Flash Player Desktop Runtime
risk 0.43cvss 6.5epss 0.04
Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than…
CVE-2016-4271MedSep 14, 2016
Adobe Inc.
Flash Player Desktop Runtime
risk 0.43cvss 6.5epss 0.05
Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than…
CVE-2026-48411MedAug 11, 2026
Adobe Inc.
Commerce
risk 0.42cvss 6.5epss 0.00
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue…
CVE-2026-48436MedAug 11, 2026
Adobe Inc.
C2pa Web
risk 0.42cvss 6.5epss 0.00
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires…
CVE-2026-48375MedAug 11, 2026
Adobe Inc.
Coldfusion
risk 0.42cvss 6.5epss 0.01
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service. A low-privileged attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue…
CVE-2025-54267MedOct 14, 2025
Adobe Inc.
Commerce
risk 0.42cvss 6.5epss 0.00
Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vulnerability. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to…
CVE-2025-54249MedSep 9, 2025
Adobe Inc.
Experience Manager
risk 0.42cvss 6.5epss 0.02
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate server-side requests and bypass…
CVE-2025-54247MedSep 9, 2025
Adobe Inc.
Experience Manager
risk 0.42cvss 6.5epss 0.00
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read…
CVE-2025-54246MedSep 9, 2025
Adobe Inc.
Experience Manager
risk 0.42cvss 6.5epss 0.00
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write…
CVE-2025-27207MedJun 10, 2025
Adobe Inc.
Commerce
risk 0.42cvss 6.5epss 0.00
Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in privilege escalation. A low privileged attacker could leverage this vulnerability to bypass security measures and…
CVE-2025-24427MedFeb 11, 2025
Adobe Inc.
Commerce
risk 0.42cvss 6.5epss 0.01
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security…
CVE-2025-24426MedFeb 11, 2025
Adobe Inc.
Commerce
risk 0.42cvss 6.5epss 0.01
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security…
CVE-2025-24424MedFeb 11, 2025
Adobe Inc.
Commerce
risk 0.42cvss 6.5epss 0.01
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security…
CVE-2025-24422MedFeb 11, 2025
Adobe Inc.
Commerce
risk 0.42cvss 6.5epss 0.01
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security…
CVE-2025-24408MedFeb 11, 2025
Adobe Inc.
Commerce
risk 0.42cvss 6.5epss 0.01
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Information Exposure vulnerability that could result in privilege escalation. A low-privileged attacker could gain unauthorized access to sensitive information.…
CVE-2024-43729MedDec 10, 2024
Adobe Inc.
Experience Manager
risk 0.42cvss 6.5epss 0.01
Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a high impact on…
CVE-2024-45132MedOct 10, 2024
Adobe Inc.
Commerce
risk 0.42cvss 6.5epss 0.01
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect…
CVE-2024-45118MedOct 10, 2024
Adobe Inc.
Commerce
risk 0.42cvss 6.5epss 0.01
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have…
CVE-2023-22268MedNov 17, 2023
Adobe Inc.
Robohelp
risk 0.42cvss 6.5epss 0.01
Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead to information disclosure by an low-privileged authenticated attacker. Exploitation of this issue…
CVE-2023-38209MedAug 9, 2023
Adobe Inc.
Commerce
risk 0.42cvss 6.5epss 0.01
Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by an Incorrect Authorization vulnerability that could lead to a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access other…
CVE-2023-29289MedJun 15, 2023
Adobe Inc.
Commerce
risk 0.42cvss 6.5epss 0.01
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an XML Injection vulnerability. An attacker with low privileges can trigger a specially crafted script to a security feature bypass. Exploitation of this issue does not…
CVE-2022-42343MedDec 16, 2022
Adobe Inc.
Campaign
risk 0.42cvss 6.5epss 0.01
Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A low-privilege authenticated attacker can force the application to make arbitrary requests via…
CVE-2022-34256HigAug 16, 2022
Adobe Inc.
Commerce
risk 0.42cvss 7.5epss 0.02
Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to access other user's data.…
CVE-2021-43762MedJan 13, 2022
Adobe Inc.
Aem
risk 0.42cvss 6.5epss 0.02
AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a dispatcher bypass vulnerability that could be abused to evade security controls. Sensitive areas of the web application may be exposed through exploitation of the vulnerability.

Page 74 of 154