Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Adobe — Vulnerabilities & Security Advisories 4289

Browse all 4289 CVE security advisories affecting Adobe. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by Adobe:Adobe Experience ManagerAdobe Acrobat and ReaderAcrobat ReaderAdobe CommerceIllustratorInDesign DesktopColdFusionDimensionBridgeAfter EffectsAnimateExperience ManagerSubstance3D - StagerMagento CommerceAdobe FramemakerSubstance3D - PainterInDesignInCopyPhotoshopMedia EncoderSubstance3D - ModelerAdobe Photoshop CCSubstance3D - DesignerAdobe ConnectAuditionFrameMakerMagentoAdobe PhotoshopPhotoshop DesktopSubstance3D - Sampler
CVE IDTitleCVSSSeverityPublished
CVE-2024-39408 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) — Adobe CommerceCWE-352 4.3 Medium2024-08-14
CVE-2024-39417 An unauthorized user can export the Shipping Report — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-39410 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) — Adobe CommerceCWE-352 4.3 Medium2024-08-14
CVE-2024-39407 Adobe Commerce | Improper Authorization (CWE-285) — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-39398 OTP 2FA can be bruteforced — Adobe CommerceCWE-307 7.4 High2024-08-14
CVE-2024-39401 Adobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) — Adobe CommerceCWE-78 8.4 High2024-08-14
CVE-2024-39397 Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) — Adobe CommerceCWE-434 9.0 Critical2024-08-14
CVE-2024-39409 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) — Adobe CommerceCWE-352 4.3 Medium2024-08-14
CVE-2024-39411 Adobe Commerce | Improper Authorization (CWE-285) — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-39416 Unauthorized user can export Orders Sale Report — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-39414 Being able to import/export tax rates without proper privileges — Adobe CommerceCWE-284 4.3 Medium2024-08-14
CVE-2024-39412 Adobe Commerce | Improper Authorization (CWE-285) — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-39402 Adobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) — Adobe CommerceCWE-78 8.4 High2024-08-14
CVE-2024-39406 Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) — Adobe CommerceCWE-22 6.8 Medium2024-08-14
CVE-2024-39400 DOM XSS through integrations can impact other admins — Adobe CommerceCWE-79 8.1 High2024-08-14
CVE-2024-39404 A user without Shop Policy Parameters section privilege can alter the shop policy parameters section — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-39415 An unauthorized user can export the Tax Sales Report — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-39405 Adobe Commerce | Improper Authorization (CWE-285) — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-41864 Adobe Substance 3D Designer ICO Parsing Out-Of-Bounds Write Vulnerability — Substance3D - DesignerCWE-787 7.8 High2024-08-14
CVE-2024-41862 Adobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability II, when parsing PSD file — Substance3D - SamplerCWE-125 5.5 Medium2024-08-14
CVE-2024-41861 Adobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability I, when parsing PSD file — Substance3D - SamplerCWE-125 5.5 Medium2024-08-14
CVE-2024-41863 Adobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability III, when parsing DNG file — Substance3D - SamplerCWE-125 5.5 Medium2024-08-14
CVE-2024-41860 Adobe Substance 3D Sampler Memory Corruption Vulnerability I, when parsing PSD file — Substance3D - SamplerCWE-125 5.5 Medium2024-08-14
CVE-2024-41858 Adobe InCopy has an integer overflow vulnerability when parsing SVG file — InCopyCWE-190 7.8 High2024-08-14
CVE-2024-39392 Adobe Indesign 2024 EPS File Parsing Heap Memory Corruption Remote Code Execution Vulnerability — InDesign DesktopCWE-122 7.8 High2024-08-02
CVE-2024-39396 Adobe Indesign 2024 PCX File Parsing Out Of Bound Read — InDesign DesktopCWE-125 5.5 Medium2024-08-02
CVE-2024-39379 Acrobat for Edge | Out-of-bounds Read (CWE-125) — Acrobat for EdgeCWE-125 5.5 Medium2024-07-31
CVE-2024-41839 Adobe Experience Manager | Improper Input Validation (CWE-20) — Adobe Experience ManagerCWE-20 3.5 Low2024-07-23
CVE-2024-41836 InDesign Desktop | NULL Pointer Dereference (CWE-476) — InDesign DesktopCWE-476 5.5 Medium2024-07-23
CVE-2024-34128 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience ManagerCWE-79 5.4 Medium2024-07-23

This page lists every published CVE security advisory associated with Adobe. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.