Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Adobe — Vulnerabilities & Security Advisories 4862

Browse all 4862 CVE security advisories affecting Adobe. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Adobe Systems Incorporated primarily develops multimedia and creativity software, most notably the PDF format and the Creative Cloud suite. With a vast attack surface encompassing 4,289 recorded CVEs, the company has historically faced significant security challenges. Common vulnerability classes include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from complex legacy codebases and third-party integrations. Notable incidents include critical RCE vulnerabilities in Acrobat Reader and Flash Player, which were frequently exploited by state-sponsored actors and criminal syndicates. The discontinuation of Flash Player marked a pivotal shift, yet the persistence of high-severity bugs in PDF parsing and document processing engines continues to pose risks. Adobe’s extensive market share makes it a high-value target, necessitating rigorous patch management and secure coding practices to mitigate the ongoing threat landscape associated with its widely deployed enterprise and consumer applications.

CVE ID Title CVSS Severity Published
CVE-2025-49538 ColdFusion | XML Injection (aka Blind XPath Injection) (CWE-91) — ColdFusion CWE-91 7.4 High 2025-07-08
CVE-2025-30312 Dimension | Out-of-bounds Write (CWE-787) — Dimension CWE-787 7.8 High 2025-07-08
CVE-2025-47135 Dimension | Out-of-bounds Read (CWE-125) — Dimension CWE-125 5.5 Medium 2025-07-08
CVE-2025-21168 Substance3D - Designer | Out-of-bounds Read (CWE-125) — Substance3D - Designer CWE-125 5.5 Medium 2025-07-08
CVE-2025-21166 Substance3D - Designer | Out-of-bounds Write (CWE-787) — Substance3D - Designer CWE-787 7.8 High 2025-07-08
CVE-2025-21165 Substance3D - Designer | Out-of-bounds Write (CWE-787) — Substance3D - Designer CWE-787 7.8 High 2025-07-08
CVE-2025-21164 Substance3D - Designer | Out-of-bounds Write (CWE-787) — Substance3D - Designer CWE-787 7.8 High 2025-07-08
CVE-2025-21167 Substance3D - Designer | Out-of-bounds Read (CWE-125) — Substance3D - Designer CWE-125 5.5 Medium 2025-07-08
CVE-2025-43580 Audition | Access of Memory Location After End of Buffer (CWE-788) — Audition CWE-788 5.5 Medium 2025-07-08
CVE-2025-47109 After Effects | NULL Pointer Dereference (CWE-476) — After Effects CWE-476 5.5 Medium 2025-07-08
CVE-2025-43587 After Effects | Out-of-bounds Read (CWE-125) — After Effects CWE-125 5.5 Medium 2025-07-08
CVE-2025-49550 Adobe Commerce | Incorrect Authorization (CWE-863) — Adobe Commerce CWE-863 4.3 Medium 2025-06-25
CVE-2025-49549 Adobe Commerce | Incorrect Authorization (CWE-863) — Adobe Commerce CWE-863 2.7 Low 2025-06-25
CVE-2025-46995 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-06-10
CVE-2025-46917 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-06-10
CVE-2025-46901 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-06-10
CVE-2025-47052 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-06-10
CVE-2025-47077 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-06-10
CVE-2025-46954 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-06-10
CVE-2025-47091 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-06-10
CVE-2025-47065 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-06-10
CVE-2025-47015 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-06-10
CVE-2025-47029 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-06-10
CVE-2025-47060 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-06-10
CVE-2025-46951 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-06-10
CVE-2025-46985 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-06-10
CVE-2025-46874 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-06-10
CVE-2025-47075 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-06-10
CVE-2025-46971 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-06-10
CVE-2025-46997 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager CWE-79 5.4 Medium 2025-06-10

This page lists every published CVE security advisory associated with Adobe. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.