Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Adobe — Vulnerabilities & Security Advisories 4862

Browse all 4862 CVE security advisories affecting Adobe. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Adobe Systems Incorporated primarily develops multimedia and creativity software, most notably the PDF format and the Creative Cloud suite. With a vast attack surface encompassing 4,289 recorded CVEs, the company has historically faced significant security challenges. Common vulnerability classes include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from complex legacy codebases and third-party integrations. Notable incidents include critical RCE vulnerabilities in Acrobat Reader and Flash Player, which were frequently exploited by state-sponsored actors and criminal syndicates. The discontinuation of Flash Player marked a pivotal shift, yet the persistence of high-severity bugs in PDF parsing and document processing engines continues to pose risks. Adobe’s extensive market share makes it a high-value target, necessitating rigorous patch management and secure coding practices to mitigate the ongoing threat landscape associated with its widely deployed enterprise and consumer applications.

CVE ID Title CVSS Severity Published
CVE-2025-54242 Premiere Pro | Use After Free (CWE-416) — Premiere Pro CWE-416 7.8 High 2025-09-09
CVE-2025-54256 Dreamweaver Desktop | Cross-Site Request Forgery (CSRF) (CWE-352) — Dreamweaver Desktop CWE-352 8.6 High 2025-09-09
CVE-2025-54261 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) — ColdFusion CWE-22 10.0 Critical 2025-09-09
CVE-2025-54250 Adobe Experience Manager | Improper Input Validation (CWE-20) — Adobe Experience Manager CWE-20 4.9 Medium 2025-09-09
CVE-2025-54247 Adobe Experience Manager | Improper Input Validation (CWE-20) — Adobe Experience Manager CWE-20 6.5 Medium 2025-09-09
CVE-2025-54246 Adobe Experience Manager | Incorrect Authorization (CWE-863) — Adobe Experience Manager CWE-863 6.5 Medium 2025-09-09
CVE-2025-54248 Adobe Experience Manager | Improper Input Validation (CWE-20) — Adobe Experience Manager CWE-20 7.7 High 2025-09-09
CVE-2025-54251 Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91) — Adobe Experience Manager CWE-91 4.3 Medium 2025-09-09
CVE-2025-54252 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-09-09
CVE-2025-54249 Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918) — Adobe Experience Manager CWE-918 6.5 Medium 2025-09-09
CVE-2025-54236 Adobe Commerce | Improper Input Validation (CWE-20) — Adobe Commerce CWE-20 9.1 Critical 2025-09-09
CVE-2025-47054 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-08-20
CVE-2025-46849 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-08-20
CVE-2025-46852 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-08-20
CVE-2025-46856 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-08-20
CVE-2025-46932 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-08-20
CVE-2025-46936 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-08-20
CVE-2025-46962 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-08-20
CVE-2025-46998 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-08-20
CVE-2025-54234 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) — ColdFusion CWE-918 2.7 Low 2025-08-18
CVE-2025-54238 Dimension | Out-of-bounds Read (CWE-125) — Dimension CWE-125 5.5 Medium 2025-08-12
CVE-2025-54233 Adobe Framemaker | Out-of-bounds Read (CWE-125) — Adobe Framemaker CWE-125 5.5 Medium 2025-08-12
CVE-2025-54230 Adobe Framemaker | Use After Free (CWE-416) — Adobe Framemaker CWE-416 7.8 High 2025-08-12
CVE-2025-54231 Adobe Framemaker | Use After Free (CWE-416) — Adobe Framemaker CWE-416 7.8 High 2025-08-12
CVE-2025-54232 Adobe Framemaker | Use After Free (CWE-416) — Adobe Framemaker CWE-416 7.8 High 2025-08-12
CVE-2025-54229 Adobe Framemaker | Use After Free (CWE-416) — Adobe Framemaker CWE-416 7.8 High 2025-08-12
CVE-2025-54222 Substance3D - Stager | Out-of-bounds Write (CWE-787) — Substance3D - Stager CWE-787 7.8 High 2025-08-12
CVE-2025-54216 InCopy | Out-of-bounds Write (CWE-787) — InCopy CWE-787 7.8 High 2025-08-12
CVE-2025-54217 InCopy | Heap-based Buffer Overflow (CWE-122) — InCopy CWE-122 7.8 High 2025-08-12
CVE-2025-54215 InCopy | Out-of-bounds Write (CWE-787) — InCopy CWE-787 7.8 High 2025-08-12

This page lists every published CVE security advisory associated with Adobe. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.