Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Adobe — Vulnerabilities & Security Advisories 4915

Browse all 4915 CVE security advisories affecting Adobe. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Adobe Systems Incorporated primarily develops multimedia and creativity software, most notably the PDF format and the Creative Cloud suite. With a vast attack surface encompassing 4,289 recorded CVEs, the company has historically faced significant security challenges. Common vulnerability classes include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from complex legacy codebases and third-party integrations. Notable incidents include critical RCE vulnerabilities in Acrobat Reader and Flash Player, which were frequently exploited by state-sponsored actors and criminal syndicates. The discontinuation of Flash Player marked a pivotal shift, yet the persistence of high-severity bugs in PDF parsing and document processing engines continues to pose risks. Adobe’s extensive market share makes it a high-value target, necessitating rigorous patch management and secure coding practices to mitigate the ongoing threat landscape associated with its widely deployed enterprise and consumer applications.

Top products by Adobe: Adobe Experience Manager Adobe Acrobat and Reader Acrobat Reader Adobe Experience Manager as a Cloud Service Adobe Commerce Illustrator InDesign Desktop After Effects Dimension Bridge ColdFusion Animate Experience Manager Substance3D - Stager Substance3D - Painter Magento Commerce Adobe Framemaker InDesign InCopy ColdFusion 2025 Photoshop Adobe Connect Media Encoder Adobe Bridge Substance3D - Modeler Content Credentials Rust SDK Audition Adobe Photoshop CC Adobe Campaign Classic FrameMaker
CVE ID Title CVSS Severity Published
CVE-2022-42339 Adobe Acrobat Reader DC XFA Parsing Stack Overflow Remote Code Execution — Acrobat Reader CWE-121 7.8 High 2022-10-14
CVE-2022-42342 Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Acrobat Reader CWE-125 5.5 Medium 2022-10-14
CVE-2022-38424 Adobe ColdFusion Application Server Directory Traversal Arbitrary file system write — ColdFusion CWE-22 7.2 High 2022-10-14
CVE-2022-42340 Adobe ColdFusion Improper Input Validation Arbitrary file system read — ColdFusion CWE-20 7.5 High 2022-10-14
CVE-2022-42341 Adobe ColdFusion Improper Restriction of XML External Entity Reference Arbitrary file system read — ColdFusion CWE-611 7.5 High 2022-10-14
CVE-2022-38419 Adobe ColdFusion Solr Service XML External Entity Processing Arbitrary file system read — ColdFusion CWE-611 7.5 High 2022-10-14
CVE-2022-38421 Adobe ColdFusion Application Server Directory Traversal Remote Code Execution Vulnerability — ColdFusion CWE-22 7.2 High 2022-10-14
CVE-2022-38422 Adobe ColdFusion Application Server Directory Traversal Information Disclosure Vulnerability — ColdFusion CWE-22 7.5 High 2022-10-14
CVE-2022-38423 Adobe ColdFusion Application Server Directory Traversal Information Disclosure Vulnerability — ColdFusion CWE-22 4.9 Medium 2022-10-14
CVE-2022-35690 Adobe ColdFusion ODBC Agent Stack-based Buffer Overflow Remote Code Execution Vulnerability — ColdFusion CWE-121 9.8 Critical 2022-10-14
CVE-2022-35711 Adobe ColdFusion ODBC Server Heap-based Buffer Overflow Remote Code Execution Vulnerability — ColdFusion CWE-122 9.8 Critical 2022-10-14
CVE-2022-35712 Adobe ColdFusion ODBC Agent Heap-based Buffer Overflow Remote Code Execution Vulnerability — ColdFusion CWE-122 9.8 Critical 2022-10-14
CVE-2022-38420 Adobe ColdFusion Use of Hard-coded Credentials Application denial-of-service — ColdFusion CWE-798 7.5 High 2022-10-14
CVE-2022-35710 Adobe ColdFusion ODBC Server Stack-based Buffer Overflow Remote Code Execution Vulnerability — ColdFusion CWE-121 9.8 Critical 2022-10-14
CVE-2022-38418 Adobe ColdFusion Application Server Directory Traversal Remote Code Execution Vulnerability — ColdFusion CWE-22 9.8 Critical 2022-10-14
CVE-2022-28851 AEM Reflected XSS Arbitrary code execution — Experience Manager CWE-79 5.4 Medium 2022-09-30
CVE-2022-38439 AEM Reflected XSS Arbitrary code execution — Experience Manager CWE-79 5.4 Medium 2022-09-23
CVE-2022-38438 AEM Reflected XSS Arbitrary code execution — Experience Manager CWE-79 5.4 Medium 2022-09-23
CVE-2022-35708 Adobe Bridge SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability — Bridge CWE-122 7.8 High 2022-09-19
CVE-2022-38425 Adobe Bridge DCM File Parsing Use-After-Free Information Disclosure Vulnerability — Bridge CWE-416 5.5 Medium 2022-09-19
CVE-2022-35700 Adobe Bridge SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability — Bridge CWE-787 7.8 - 2022-09-19
CVE-2022-35704 Adobe Bridge SVG File Parsing Use-After-Free Remote Code Execution Vulnerability — Bridge CWE-416 7.8 High 2022-09-19
CVE-2022-35706 Adobe Bridge SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability — Bridge CWE-122 7.8 High 2022-09-19
CVE-2022-35709 Adobe Bridge DCM File Parsing Use-After-Free Information Disclosure Vulnerability — Bridge CWE-416 5.5 Medium 2022-09-19
CVE-2022-35699 Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability — Bridge CWE-787 7.8 - 2022-09-19
CVE-2022-35701 Adobe Bridge SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability — Bridge CWE-787 7.8 - 2022-09-19
CVE-2022-35702 Adobe Bridge SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability — Bridge CWE-125 7.8 - 2022-09-19
CVE-2022-35703 Adobe Bridge SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability — Bridge CWE-125 7.8 - 2022-09-19
CVE-2022-35705 Adobe Bridge MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability — Bridge CWE-125 7.8 High 2022-09-19
CVE-2022-35707 Adobe Bridge SGI File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability — Bridge CWE-125 7.8 High 2022-09-19

This page lists every published CVE security advisory associated with Adobe. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.