Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Adobe — Vulnerabilities & Security Advisories 4915

Browse all 4915 CVE security advisories affecting Adobe. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Adobe Systems Incorporated primarily develops multimedia and creativity software, most notably the PDF format and the Creative Cloud suite. With a vast attack surface encompassing 4,289 recorded CVEs, the company has historically faced significant security challenges. Common vulnerability classes include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from complex legacy codebases and third-party integrations. Notable incidents include critical RCE vulnerabilities in Acrobat Reader and Flash Player, which were frequently exploited by state-sponsored actors and criminal syndicates. The discontinuation of Flash Player marked a pivotal shift, yet the persistence of high-severity bugs in PDF parsing and document processing engines continues to pose risks. Adobe’s extensive market share makes it a high-value target, necessitating rigorous patch management and secure coding practices to mitigate the ongoing threat landscape associated with its widely deployed enterprise and consumer applications.

CVE ID Title CVSS Severity Published
CVE-2023-26340 ZDI-CAN-19387: Adobe Dimension OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Dimension CWE-125 5.5 Medium 2023-03-28
CVE-2023-26341 ZDI-CAN-19391: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Dimension CWE-125 5.5 Medium 2023-03-28
CVE-2023-26342 ZDI-CAN-19413: Adobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Dimension CWE-125 5.5 Medium 2023-03-28
CVE-2023-26343 ZDI-CAN-19465: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Dimension CWE-125 5.5 Medium 2023-03-28
CVE-2023-26344 ZDI-CAN-19467: Adobe Dimension USD File Access of Uninitialized Pointer Information Disclosure Vulnerability — Dimension CWE-824 5.5 Medium 2023-03-28
CVE-2023-26345 ZDI-CAN-19494: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Dimension CWE-125 5.5 Medium 2023-03-28
CVE-2023-26346 ZDI-CAN-19495: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Dimension CWE-125 5.5 Medium 2023-03-28
CVE-2023-26348 ZDI-CAN-19518: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Dimension CWE-125 5.5 Medium 2023-03-28
CVE-2023-26349 ZDI-CAN-20218: Adobe Dimension USDZ File Parsing Use-After-Free Information Disclosure Vulnerability — Dimension CWE-416 5.5 Medium 2023-03-28
CVE-2023-26350 ZDI-CAN-19510: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Dimension CWE-125 5.5 Medium 2023-03-28
CVE-2023-26351 ZDI-CAN-19507: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Dimension CWE-125 5.5 Medium 2023-03-28
CVE-2023-26352 ZDI-CAN-19509: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Dimension CWE-125 5.5 Medium 2023-03-28
CVE-2023-26353 ZDI-CAN-19511: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Dimension CWE-125 5.5 Medium 2023-03-28
CVE-2023-26354 ZDI-CAN-19519: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Dimension CWE-125 5.5 Medium 2023-03-28
CVE-2023-26355 ZDI-CAN-19512: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Dimension CWE-125 5.5 Medium 2023-03-28
CVE-2023-26356 ZDI-CAN-19506: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Dimension CWE-125 5.5 Medium 2023-03-28
CVE-2023-22247 Adobe Commerce XML Injection Arbitrary file system read — Magento Commerce CWE-91 7.5 High 2023-03-27
CVE-2023-22249 Adobe Commerce Stored XSS Arbitrary code execution — Magento Commerce CWE-79 4.8 Medium 2023-03-27
CVE-2023-22250 Adobe Commerce Improper Access Control Security feature bypass — Magento Commerce CWE-284 5.3 Medium 2023-03-27
CVE-2023-22251 Adobe Commerce Incorrect Authorization Security feature bypass — Magento Commerce CWE-863 4.3 Medium 2023-03-27
CVE-2023-25863 Adobe Substance 3D Stager USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability — Substance3D - Stager CWE-125 7.8 High 2023-03-27
CVE-2023-25864 Adobe Substance 3D Stager FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability — Substance3D - Stager CWE-122 7.8 High 2023-03-27
CVE-2023-25865 Adobe Substance 3D Stager OBJ File Parsing Memory Corruption Remote Code Execution Vulnerability — Substance3D - Stager CWE-20 7.8 High 2023-03-27
CVE-2023-25866 Adobe Substance 3D Stager OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability — Substance3D - Stager CWE-787 7.8 High 2023-03-27
CVE-2023-25867 Adobe Substance 3D Stager PCX File Parsing Memory Corruption Remote Code Execution Vulnerability — Substance3D - Stager CWE-20 7.8 High 2023-03-27
CVE-2023-25868 Adobe Substance 3D Stager SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability — Substance3D - Stager CWE-122 7.8 High 2023-03-27
CVE-2023-25869 Adobe Substance 3D Stager SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability — Substance3D - Stager CWE-125 7.8 High 2023-03-27
CVE-2023-25870 Adobe Substance 3D Stager SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability — Substance3D - Stager CWE-787 7.8 High 2023-03-27
CVE-2023-25871 Adobe Substance 3D Stager SVG File Parsing Use-After-Free Remote Code Execution Vulnerability — Substance3D - Stager CWE-416 7.8 High 2023-03-27
CVE-2023-25872 Adobe Substance 3D Stager SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability — Substance3D - Stager CWE-122 7.8 High 2023-03-27

This page lists every published CVE security advisory associated with Adobe. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.