Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Adobe — Vulnerabilities & Security Advisories 4289

Browse all 4289 CVE security advisories affecting Adobe. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by Adobe:Adobe Experience ManagerAdobe Acrobat and ReaderAcrobat ReaderAdobe CommerceIllustratorInDesign DesktopColdFusionDimensionBridgeAfter EffectsAnimateExperience ManagerSubstance3D - StagerMagento CommerceAdobe FramemakerSubstance3D - PainterInDesignInCopyPhotoshopMedia EncoderSubstance3D - ModelerAdobe Photoshop CCSubstance3D - DesignerAdobe ConnectAuditionFrameMakerMagentoAdobe PhotoshopPhotoshop DesktopSubstance3D - Sampler
CVE IDTitleCVSSSeverityPublished
CVE-2024-34140 Adobe Bridge PDF File Parsing Memory Corruption — BridgeCWE-125 5.5 Medium2024-07-09
CVE-2024-34139 Adobe Bridge has an integer overflow vulnerability when parsing SVG file — BridgeCWE-190 7.8 High2024-07-09
CVE-2024-20781 Adobe Indesign TIF File Parsing Heap Memory Corruption — InDesign DesktopCWE-122 7.8 High2024-07-09
CVE-2024-20785 Adobe Indesign 2024 TIFF File Parsing Memory Corruption Remote Code Execution vulnerability — InDesign DesktopCWE-122 7.8 High2024-07-09
CVE-2024-20783 Adobe Indesign 2024 RLE File Parsing Heap Memory Corruption — InDesign DesktopCWE-122 7.8 High2024-07-09
CVE-2024-20782 Adobe Indesign WMF File Parsing Out Of Bound Write — InDesign DesktopCWE-787 7.8 High2024-07-09
CVE-2024-34123 Adobe Premiere Pro arbitrary DLL loading lead to remote code execution — Premiere ProCWE-426 7.0 High2024-07-09
CVE-2024-34122 T5 Acrobat Vulnerability - Exploitable crash in DecodeTile — Acrobat for EdgeCWE-125 7.8 High2024-07-02
CVE-2024-34142 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience ManagerCWE-79 5.4 Medium2024-06-25
CVE-2024-34141 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience ManagerCWE-79 5.4 Medium2024-06-25
CVE-2024-34130 Acrobat Android : OverSecured Finding : Access to arbitrary* content providers via insecure Intent configuration — Acrobat Mobile Sign AndroidCWE-863 5.5 Medium2024-06-13
CVE-2024-34129 Acrobat Android : OverSecured Finding : Overwriting arbitrary files via attacker-controlled output file paths — Acrobat Mobile Sign AndroidCWE-22 7.5 High2024-06-13
CVE-2024-34112 ColdFusion CFDOCUMENT file retrieval / access control bypass — ColdFusionCWE-284 7.5 High2024-06-13
CVE-2024-34113 ColdFusion | Weak Cryptography for Passwords (CWE-261) — ColdFusionCWE-261 5.5 Medium2024-06-13
CVE-2024-34116 Adobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege Escalation — Creative Cloud DesktopCWE-427 7.1 High2024-06-13
CVE-2024-34115 ZDI-CAN-24054: Adobe Substance 3D Stager SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability — Substance3D - StagerCWE-787 7.8 High2024-06-13
CVE-2024-30300 Tenable Vulnerability Disclosure | Sensitive Information Disclosure Via Fake FMPS Worker — Adobe Framemaker Publishing ServerCWE-200 9.8 Critical2024-06-13
CVE-2024-30299 Tenable Vulnerability Disclosure | API Auth Bypass — Adobe Framemaker Publishing ServerCWE-287 10.0 Critical2024-06-13
CVE-2024-20753 Adobe Photoshop PDF File Parsing Memory Corruption Remote Code Execution Vulnerability — Photoshop DesktopCWE-125 7.8 High2024-06-13
CVE-2024-30278 Adobe Media Encoder 2024 TGA File parsing memory corruption — Media EncoderCWE-125 5.5 Medium2024-06-13
CVE-2024-34106 Insecure Direct Object Reference - An attacker can able to erase the victim quote details — Adobe CommerceCWE-863 5.3 Medium2024-06-13
CVE-2024-34103 Customer account takeover via web API call & subsequent password reset — Adobe CommerceCWE-287 8.1 High2024-06-13
CVE-2024-34109 Adobe Commerce | Improper Input Validation (CWE-20) — Adobe CommerceCWE-20 7.2 High2024-06-13
CVE-2024-34110 RCE in the Adobe Commerce Webhook module through a legit webhook definition — Adobe CommerceCWE-434 7.2 High2024-06-13
CVE-2024-34111 SSRF in service connector — Adobe CommerceCWE-918 6.5 Medium2024-06-13
CVE-2024-34107 Adobe Commerce | Improper Access Control (CWE-284) — Adobe CommerceCWE-284 5.3 Medium2024-06-13
CVE-2024-34105 Stored Cross Site Scripting in Order Comment — Adobe CommerceCWE-79 4.8 Medium2024-06-13
CVE-2024-34104 Adobe Commerce | Improper Authorization (CWE-285) — Adobe CommerceCWE-285 8.2 High2024-06-13
CVE-2024-34102 XXE can expose crypt key and other secrets granting full admin access — Adobe CommerceCWE-611 9.8 Critical2024-06-13
CVE-2024-34108 Large attack surface through legit webhook usage in Adobe Commerce — Adobe CommerceCWE-20 9.1 Critical2024-06-13

This page lists every published CVE security advisory associated with Adobe. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.