Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Adobe — Vulnerabilities & Security Advisories 4862

Browse all 4862 CVE security advisories affecting Adobe. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Adobe Systems Incorporated primarily develops multimedia and creativity software, most notably the PDF format and the Creative Cloud suite. With a vast attack surface encompassing 4,289 recorded CVEs, the company has historically faced significant security challenges. Common vulnerability classes include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from complex legacy codebases and third-party integrations. Notable incidents include critical RCE vulnerabilities in Acrobat Reader and Flash Player, which were frequently exploited by state-sponsored actors and criminal syndicates. The discontinuation of Flash Player marked a pivotal shift, yet the persistence of high-severity bugs in PDF parsing and document processing engines continues to pose risks. Adobe’s extensive market share makes it a high-value target, necessitating rigorous patch management and secure coding practices to mitigate the ongoing threat landscape associated with its widely deployed enterprise and consumer applications.

CVE ID Title CVSS Severity Published
CVE-2021-21013 Magento Commerce Insecure Direct Object Reference Could Lead To Information Disclosure — Magento Commerce CWE-863 8.1 High 2021-01-13
CVE-2021-21012 Magento Commerce Insecure Direct Object Reference Vulnerability Could Lead To Sensitive Information Disclosure — Magento Commerce CWE-639 5.3 - 2021-01-13
CVE-2020-24440 Uncontrolled Search Path Element in Adobe Prelude for Windows — Prelude CWE-427 7.0 High 2020-12-11
CVE-2020-24447 Uncontrolled Search Path Element vulnerability in Lightroom Classic 10.0 — Lightroom CWE-427 7.0 High 2020-12-11
CVE-2020-24444 Blind SSRF in Forms add-on for AEM — Experience Manager CWE-918 5.8 Medium 2020-12-10
CVE-2020-24441 Improper Access Control in Adobe Acrobat Reader for Android — Acrobat Reader CWE-284 5.5 Medium 2020-11-12
CVE-2020-24443 Reflected Cross-Site Scripting (XSS) in Adobe Connect — Connect CWE-79 6.1 Medium 2020-11-12
CVE-2020-24442 Reflected Cross-Site Scripting (XSS) in Adobe Connect — Connect CWE-79 6.1 Medium 2020-11-12
CVE-2020-24404 Incorrect permissions in Integrations component could lead to unauthorized deletion of cmsPages via REST API — Magento Commerce CWE-285 2.7 Low 2020-11-09
CVE-2020-24407 Arbitrary code execution via file import functionality — Magento Commerce CWE-434 9.1 Critical 2020-11-09
CVE-2020-24406 Document root path disclosure on Maintenance page — Magento Commerce CWE-200 3.7 Low 2020-11-09
CVE-2020-24405 Incorrect permissions in Inventory module could lead to unauthorized modification of inventory stock data — Magento Commerce CWE-285 4.3 Medium 2020-11-09
CVE-2020-24403 Incorrect permissions could lead to unauthorized modification of inventory source data via REST API — Magento Commerce CWE-285 2.7 Low 2020-11-09
CVE-2020-24401 Incorrect permissions following the deletion of a user role or deactivation of a user — Magento Commerce CWE-863 6.5 Medium 2020-11-09
CVE-2020-24402 Incorrect permissions in the Integrations component could lead to unauthorized deletion of customer details via REST API — Magento Commerce CWE-276 4.9 Medium 2020-11-09
CVE-2020-24400 SQL injection allows arbitrary read from database — Magento Commerce CWE-89 7.1 High 2020-11-09
CVE-2020-24436 Acrobat Pro DC PDF Export Out-Of-Bounds Write Vulnerability Could Lead to Arbitrary Code Execution — Acrobat Reader CWE-787 7.8 High 2020-11-05
CVE-2020-24439 Acrobat Reader DC for macOS Signature Validation Bypass — Acrobat Reader CWE-347 2.8 Low 2020-11-05
CVE-2020-24433 Adobe Acrobat Reader DC Local Privilege Escalation via Installer Component — Acrobat Reader CWE-284 7.8 High 2020-11-05
CVE-2020-24438 Acrobat Reader DC Use-After-Free Vulnerability Could Lead to Information Disclosure — Acrobat Reader CWE-416 3.3 Low 2020-11-05
CVE-2020-24434 Acrobat Pro DC Out-Of-Bounds Read Vulnerability Could Lead to Information Disclosure — Acrobat Reader CWE-125 3.3 Low 2020-11-05
CVE-2020-24435 Acrobat Reader DC Heap-based Buffer Overflow Could Lead to Arbitrary Code Execution — Acrobat Reader CWE-122 7.8 High 2020-11-05
CVE-2020-24432 Acrobat Reader DC Arbitrary JavaScript Execution in PDF Documents — Acrobat Reader CWE-20 6.7 Medium 2020-11-05
CVE-2020-24430 Acrobat Pro DC Use-After-Free vulnerability Could Lead to Arbitrary Code Execution — Acrobat Reader CWE-416 7.8 High 2020-11-05
CVE-2020-24429 Acrobat Reader DC for macOS Signature Verification Bypass Could Lead to Privilege Escalation — Acrobat Reader CWE-347 7.7 High 2020-11-05
CVE-2020-24431 Acrobat Reader DC for macOS Dynamic Library Injection Vulnerability — Acrobat Reader CWE-285 4.4 Medium 2020-11-05
CVE-2020-24428 Acrobat Reader DC for macOS Race Condition Vulnerability Could Lead to Privilege Escalation — Acrobat Reader CWE-367 7.7 High 2020-11-05
CVE-2020-24437 Acrobat Reader DC Use-After-Free Vulnerability Could Lead to Arbitrary Code Execution — Acrobat Reader CWE-416 7.8 High 2020-11-05
CVE-2020-24427 Acrobat Reader DC Codec Input Validation Vulnerability Could Lead to Information Disclosure — Acrobat Reader CWE-20 3.3 Low 2020-11-05
CVE-2020-24426 Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability — Acrobat Reader CWE-125 3.3 Low 2020-11-05

This page lists every published CVE security advisory associated with Adobe. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.