Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Adobe — Vulnerabilities & Security Advisories 4289

Browse all 4289 CVE security advisories affecting Adobe. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by Adobe:Adobe Experience ManagerAdobe Acrobat and ReaderAcrobat ReaderAdobe CommerceIllustratorInDesign DesktopColdFusionDimensionBridgeAfter EffectsAnimateExperience ManagerSubstance3D - StagerMagento CommerceAdobe FramemakerSubstance3D - PainterInDesignInCopyPhotoshopMedia EncoderSubstance3D - ModelerAdobe Photoshop CCSubstance3D - DesignerAdobe ConnectAuditionFrameMakerMagentoAdobe PhotoshopPhotoshop DesktopSubstance3D - Sampler
CVE IDTitleCVSSSeverityPublished
CVE-2020-24447 Uncontrolled Search Path Element vulnerability in Lightroom Classic 10.0 — LightroomCWE-427 7.0 High2020-12-11
CVE-2020-24444 Blind SSRF in Forms add-on for AEM — Experience ManagerCWE-918 5.8 Medium2020-12-10
CVE-2020-24441 Improper Access Control in Adobe Acrobat Reader for Android — Acrobat ReaderCWE-284 5.5 Medium2020-11-12
CVE-2020-24443 Reflected Cross-Site Scripting (XSS) in Adobe Connect — ConnectCWE-79 6.1 Medium2020-11-12
CVE-2020-24442 Reflected Cross-Site Scripting (XSS) in Adobe Connect — ConnectCWE-79 6.1 Medium2020-11-12
CVE-2020-24404 Incorrect permissions in Integrations component could lead to unauthorized deletion of cmsPages via REST API — Magento CommerceCWE-285 2.7 Low2020-11-09
CVE-2020-24407 Arbitrary code execution via file import functionality — Magento CommerceCWE-434 9.1 Critical2020-11-09
CVE-2020-24406 Document root path disclosure on Maintenance page — Magento CommerceCWE-200 3.7 Low2020-11-09
CVE-2020-24405 Incorrect permissions in Inventory module could lead to unauthorized modification of inventory stock data — Magento CommerceCWE-285 4.3 Medium2020-11-09
CVE-2020-24403 Incorrect permissions could lead to unauthorized modification of inventory source data via REST API — Magento CommerceCWE-285 2.7 Low2020-11-09
CVE-2020-24401 Incorrect permissions following the deletion of a user role or deactivation of a user — Magento CommerceCWE-863 6.5 Medium2020-11-09
CVE-2020-24402 Incorrect permissions in the Integrations component could lead to unauthorized deletion of customer details via REST API — Magento CommerceCWE-276 4.9 Medium2020-11-09
CVE-2020-24400 SQL injection allows arbitrary read from database — Magento CommerceCWE-89 7.1 High2020-11-09
CVE-2020-24436 Acrobat Pro DC PDF Export Out-Of-Bounds Write Vulnerability Could Lead to Arbitrary Code Execution — Acrobat ReaderCWE-787 7.8 High2020-11-05
CVE-2020-24439 Acrobat Reader DC for macOS Signature Validation Bypass — Acrobat ReaderCWE-347 2.8 Low2020-11-05
CVE-2020-24433 Adobe Acrobat Reader DC Local Privilege Escalation via Installer Component — Acrobat ReaderCWE-284 7.8 High2020-11-05
CVE-2020-24438 Acrobat Reader DC Use-After-Free Vulnerability Could Lead to Information Disclosure — Acrobat ReaderCWE-416 3.3 Low2020-11-05
CVE-2020-24434 Acrobat Pro DC Out-Of-Bounds Read Vulnerability Could Lead to Information Disclosure — Acrobat ReaderCWE-125 3.3 Low2020-11-05
CVE-2020-24435 Acrobat Reader DC Heap-based Buffer Overflow Could Lead to Arbitrary Code Execution — Acrobat ReaderCWE-122 7.8 High2020-11-05
CVE-2020-24432 Acrobat Reader DC Arbitrary JavaScript Execution in PDF Documents — Acrobat ReaderCWE-20 6.7 Medium2020-11-05
CVE-2020-24430 Acrobat Pro DC Use-After-Free vulnerability Could Lead to Arbitrary Code Execution — Acrobat ReaderCWE-416 7.8 High2020-11-05
CVE-2020-24429 Acrobat Reader DC for macOS Signature Verification Bypass Could Lead to Privilege Escalation — Acrobat ReaderCWE-347 7.7 High2020-11-05
CVE-2020-24431 Acrobat Reader DC for macOS Dynamic Library Injection Vulnerability — Acrobat ReaderCWE-285 4.4 Medium2020-11-05
CVE-2020-24428 Acrobat Reader DC for macOS Race Condition Vulnerability Could Lead to Privilege Escalation — Acrobat ReaderCWE-367 7.7 High2020-11-05
CVE-2020-24437 Acrobat Reader DC Use-After-Free Vulnerability Could Lead to Arbitrary Code Execution — Acrobat ReaderCWE-416 7.8 High2020-11-05
CVE-2020-24427 Acrobat Reader DC Codec Input Validation Vulnerability Could Lead to Information Disclosure — Acrobat ReaderCWE-20 3.3 Low2020-11-05
CVE-2020-24426 Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability — Acrobat ReaderCWE-125 3.3 Low2020-11-05
CVE-2020-24421 Adobe InDesign 15.1.2 NULL Pointer Dereference Bug — InDesignCWE-476 5.5 Medium2020-10-21
CVE-2020-24423 Uncontrolled Search Path in Adobe Media Encoder for Windows — Media EncoderCWE-427 7.0 High2020-10-21
CVE-2020-24424 Uncontrolled Search Path in Adobe Premiere Pro for Windows — PremiereCWE-427 7.0 High2020-10-21

This page lists every published CVE security advisory associated with Adobe. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.