Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Adobe — Vulnerabilities & Security Advisories 4862

Browse all 4862 CVE security advisories affecting Adobe. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Adobe Systems Incorporated primarily develops multimedia and creativity software, most notably the PDF format and the Creative Cloud suite. With a vast attack surface encompassing 4,289 recorded CVEs, the company has historically faced significant security challenges. Common vulnerability classes include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from complex legacy codebases and third-party integrations. Notable incidents include critical RCE vulnerabilities in Acrobat Reader and Flash Player, which were frequently exploited by state-sponsored actors and criminal syndicates. The discontinuation of Flash Player marked a pivotal shift, yet the persistence of high-severity bugs in PDF parsing and document processing engines continues to pose risks. Adobe’s extensive market share makes it a high-value target, necessitating rigorous patch management and secure coding practices to mitigate the ongoing threat landscape associated with its widely deployed enterprise and consumer applications.

CVE ID Title CVSS Severity Published
CVE-2026-75737 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager as a Cloud Service CWE-79 5.4 Medium 2026-09-08
CVE-2026-75681 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager as a Cloud Service CWE-79 5.4 Medium 2026-09-08
CVE-2026-71356 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager as a Cloud Service CWE-79 5.4 Medium 2026-09-08
CVE-2026-75701 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager as a Cloud Service CWE-79 5.4 Medium 2026-09-08
CVE-2026-75696 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager as a Cloud Service CWE-79 5.4 Medium 2026-09-08
CVE-2026-75724 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager as a Cloud Service CWE-79 5.4 Medium 2026-09-08
CVE-2026-75692 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager as a Cloud Service CWE-79 5.4 Medium 2026-09-08
CVE-2025-64542 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager as a Cloud Service CWE-79 5.4 Medium 2026-09-08
CVE-2026-75714 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager as a Cloud Service CWE-79 5.4 Medium 2026-09-08
CVE-2026-75657 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager as a Cloud Service CWE-79 5.4 Medium 2026-09-08
CVE-2026-75736 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager as a Cloud Service CWE-79 5.4 Medium 2026-09-08
CVE-2025-64588 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager as a Cloud Service CWE-79 5.4 Medium 2026-09-08
CVE-2026-75693 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager as a Cloud Service CWE-79 5.4 Medium 2026-09-08
CVE-2026-75717 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager as a Cloud Service CWE-79 5.4 Medium 2026-09-08
CVE-2026-75670 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager as a Cloud Service CWE-79 5.4 Medium 2026-09-08
CVE-2026-79905 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience Manager as a Cloud Service CWE-79 5.4 Medium 2026-09-08
CVE-2026-75720 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe Experience Manager as a Cloud Service CWE-79 5.4 Medium 2026-09-08
CVE-2026-76002 ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79) — ColdFusion 2025 CWE-79 6.1 Medium 2026-09-08
CVE-2026-75746 ColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) — ColdFusion 2025 CWE-89 9.1 Critical 2026-09-08
CVE-2026-76000 ColdFusion | Uncontrolled Resource Consumption (CWE-400) — ColdFusion 2025 CWE-400 6.5 Medium 2026-09-08
CVE-2026-75998 ColdFusion | Improper Access Control (CWE-284) — ColdFusion 2025 CWE-284 7.5 High 2026-09-08
CVE-2026-48273 ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95) — ColdFusion 2025 CWE-95 9.9 Critical 2026-09-08
CVE-2026-76190 ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95) — ColdFusion 2025 CWE-95 8.6 High 2026-09-08
CVE-2026-75999 ColdFusion | Improper Input Validation (CWE-20) — ColdFusion 2025 CWE-20 8.4 High 2026-09-08
CVE-2026-75993 ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79) — ColdFusion 2025 CWE-79 8.5 High 2026-09-08
CVE-2026-75771 Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) — Photoshop 2026 CWE-190 7.8 High 2026-09-08
CVE-2026-75631 Photoshop Desktop | Out-of-bounds Write (CWE-787) — Photoshop 2026 CWE-787 7.8 High 2026-09-08
CVE-2026-75862 Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) — Photoshop 2026 CWE-190 7.8 High 2026-09-08
CVE-2026-76199 Photoshop Desktop | Uncontrolled Search Path Element (CWE-427) — Photoshop 2026 CWE-427 8.6 High 2026-09-08
CVE-2026-82005 Photoshop Desktop | Out-of-bounds Write (CWE-787) — Photoshop 2026 CWE-787 7.8 High 2026-09-08

This page lists every published CVE security advisory associated with Adobe. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.