Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Adobe — Vulnerabilities & Security Advisories 4862

Browse all 4862 CVE security advisories affecting Adobe. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Adobe Systems Incorporated primarily develops multimedia and creativity software, most notably the PDF format and the Creative Cloud suite. With a vast attack surface encompassing 4,289 recorded CVEs, the company has historically faced significant security challenges. Common vulnerability classes include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from complex legacy codebases and third-party integrations. Notable incidents include critical RCE vulnerabilities in Acrobat Reader and Flash Player, which were frequently exploited by state-sponsored actors and criminal syndicates. The discontinuation of Flash Player marked a pivotal shift, yet the persistence of high-severity bugs in PDF parsing and document processing engines continues to pose risks. Adobe’s extensive market share makes it a high-value target, necessitating rigorous patch management and secure coding practices to mitigate the ongoing threat landscape associated with its widely deployed enterprise and consumer applications.

Found 110 results / 4862 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2023-44350 ColdFusion | Deserialization of Untrusted Data (CWE-502) — ColdFusion CWE-502 9.8 Critical 2023-11-17
CVE-2023-38204 Bypass APSB23-41 (CVE-2023-38203) - Pre-Auth RCE ColdFusion 2021 Update 8 — ColdFusion CWE-502 9.8 Critical 2023-09-14
CVE-2023-38205 ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298 — ColdFusion CWE-284 7.5 High 2023-09-14
CVE-2023-38206 ColdFusion | Improper Access Control (CWE-284) — ColdFusion CWE-284 5.3 Medium 2023-09-14
CVE-2021-40699 ColdFusion CFIDE Improper Access Control Leads To Privilege Escalation — ColdFusion CWE-284 7.4 High 2023-09-07
CVE-2021-40698 ColdFusion Use of Inherently Dangerous Function Leads To Security feature bypass   — ColdFusion CWE-242 7.4 High 2023-09-07
CVE-2023-38203 Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE — ColdFusion CWE-502 9.8 Critical 2023-07-20
CVE-2023-29300 Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution — ColdFusion CWE-502 9.8 Critical 2023-07-12
CVE-2023-29301 Adobe ColdFusion Improper Restriction of Excessive Authentication Attempts Security feature bypass — ColdFusion CWE-307 7.5 High 2023-07-12
CVE-2023-29298 Adobe ColdFusion Improper Access Control Security feature bypass — ColdFusion CWE-284 7.5 High 2023-07-12
CVE-2023-26359 Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution — ColdFusion CWE-502 9.8 Critical 2023-03-23
CVE-2023-26360 Adobe ColdFusion Improper Access Control Arbitrary code execution — ColdFusion CWE-284 8.6 High 2023-03-23
CVE-2023-26361 Adobe ColdFusion Directory Traversal Arbitrary file system read Vulnerability — ColdFusion CWE-22 4.9 Medium 2023-03-23
CVE-2022-38424 Adobe ColdFusion Application Server Directory Traversal Arbitrary file system write — ColdFusion CWE-22 7.2 High 2022-10-14
CVE-2022-42340 Adobe ColdFusion Improper Input Validation Arbitrary file system read — ColdFusion CWE-20 7.5 High 2022-10-14
CVE-2022-42341 Adobe ColdFusion Improper Restriction of XML External Entity Reference Arbitrary file system read — ColdFusion CWE-611 7.5 High 2022-10-14
CVE-2022-38419 Adobe ColdFusion Solr Service XML External Entity Processing Arbitrary file system read — ColdFusion CWE-611 7.5 High 2022-10-14
CVE-2022-38421 Adobe ColdFusion Application Server Directory Traversal Remote Code Execution Vulnerability — ColdFusion CWE-22 7.2 High 2022-10-14
CVE-2022-38422 Adobe ColdFusion Application Server Directory Traversal Information Disclosure Vulnerability — ColdFusion CWE-22 7.5 High 2022-10-14
CVE-2022-38423 Adobe ColdFusion Application Server Directory Traversal Information Disclosure Vulnerability — ColdFusion CWE-22 4.9 Medium 2022-10-14
CVE-2022-35690 Adobe ColdFusion ODBC Agent Stack-based Buffer Overflow Remote Code Execution Vulnerability — ColdFusion CWE-121 9.8 Critical 2022-10-14
CVE-2022-35711 Adobe ColdFusion ODBC Server Heap-based Buffer Overflow Remote Code Execution Vulnerability — ColdFusion CWE-122 9.8 Critical 2022-10-14
CVE-2022-35712 Adobe ColdFusion ODBC Agent Heap-based Buffer Overflow Remote Code Execution Vulnerability — ColdFusion CWE-122 9.8 Critical 2022-10-14
CVE-2022-38420 Adobe ColdFusion Use of Hard-coded Credentials Application denial-of-service — ColdFusion CWE-798 7.5 High 2022-10-14
CVE-2022-35710 Adobe ColdFusion ODBC Server Stack-based Buffer Overflow Remote Code Execution Vulnerability — ColdFusion CWE-121 9.8 Critical 2022-10-14
CVE-2022-38418 Adobe ColdFusion Application Server Directory Traversal Remote Code Execution Vulnerability — ColdFusion CWE-22 9.8 Critical 2022-10-14
CVE-2022-28818 ColdFusion Reflected Cross-Site Scripting could lead to Arbitrary Code Execution — ColdFusion CWE-79 6.1 - 2022-05-12
CVE-2020-10145 Adobe ColdFusion 安全漏洞 — ColdFusion CWE-284 7.8 High 2021-05-27
CVE-2021-21087 ColdFusion Improper neutralization of web input during page generation could lead to arbitrary JavaScript execution in the browser — ColdFusion CWE-79 6.1 - 2021-04-15
CVE-2020-3796 Adobe ColdFusion 信息泄露漏洞 — ColdFusion 7.5 - 2020-06-26

This page lists every published CVE security advisory associated with Adobe. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.