Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Adobe — Vulnerabilities & Security Advisories 4915

Browse all 4915 CVE security advisories affecting Adobe. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Adobe Systems Incorporated primarily develops multimedia and creativity software, most notably the PDF format and the Creative Cloud suite. With a vast attack surface encompassing 4,289 recorded CVEs, the company has historically faced significant security challenges. Common vulnerability classes include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from complex legacy codebases and third-party integrations. Notable incidents include critical RCE vulnerabilities in Acrobat Reader and Flash Player, which were frequently exploited by state-sponsored actors and criminal syndicates. The discontinuation of Flash Player marked a pivotal shift, yet the persistence of high-severity bugs in PDF parsing and document processing engines continues to pose risks. Adobe’s extensive market share makes it a high-value target, necessitating rigorous patch management and secure coding practices to mitigate the ongoing threat landscape associated with its widely deployed enterprise and consumer applications.

CVE ID Title CVSS Severity Published
CVE-2024-20767 ColdFusion | Improper Access Control (CWE-284) — ColdFusion CWE-284 7.4 High 2024-03-18
CVE-2024-20765 ZDI-CAN-22674: Adobe Acrobat Reader DC PDF File Parsing Use-After-Free Remote Code Execution Vulnerability — Acrobat Reader CWE-416 7.8 High 2024-02-29
CVE-2024-20716 Force high-usage of resources by generating unlimited coupons: Adobe Commerce — Adobe Commerce CWE-400 4.9 Medium 2024-02-15
CVE-2024-20717 Stored admin XSS via PayPal authentication certificate — Adobe Commerce CWE-79 5.4 Medium 2024-02-15
CVE-2024-20718 [Spain] CSRF to delete Requisition Lists at Adobe Commerce — Adobe Commerce CWE-352 4.3 Medium 2024-02-15
CVE-2024-20719 [Adobe Commerce] Stored XSS from low privileged admin user on every admin page, bypassing CVE-2023-29297 — Adobe Commerce CWE-79 9.1 Critical 2024-02-15
CVE-2024-20720 Command injection in data collector backup due to insufficient patching of CVE-2023-38208 — Adobe Commerce CWE-78 9.1 Critical 2024-02-15
CVE-2024-20750 Adobe Substance 3D Designer PICT Parsing Out-Of-Bounds Read Vulnerability — Substance3D - Designer CWE-125 7.8 High 2024-02-15
CVE-2024-20739 ZDI-CAN-22647: Adobe Audition AVI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability — Audition CWE-122 7.8 High 2024-02-15
CVE-2024-20738 Adobe FrameMaker Publishing Server Authentication Bypass Vulnerability | CVE-2023-44324 bypass — Adobe Framemaker Publishing Server CWE-287 9.8 Critical 2024-02-15
CVE-2024-20726 [TianfuCup] JP2K Image Parsing Out-Of-Bounds Write — Acrobat Reader CWE-787 7.8 High 2024-02-15
CVE-2024-20730 TALOS-2023-1906 - Adobe Acrobat Reader Font CPAL integer overflow vulnerability — Acrobat Reader CWE-190 7.8 High 2024-02-15
CVE-2024-20731 TALOS-2023-1901 - Adobe Acrobat Reader FileAttachment PDAnnot destroy use-after-free vulnerability — Acrobat Reader CWE-416 7.8 High 2024-02-15
CVE-2024-20727 [TianfuCup] out-of-bounds access vulnerability when parsing jpeg2000 — Acrobat Reader CWE-787 7.8 High 2024-02-15
CVE-2024-20733 [ZS-VR-23-360] Adobe Acrobat Reader Parsing OTF font Denial-of-Service Vulnerability — Acrobat Reader CWE-20 5.5 Medium 2024-02-15
CVE-2024-20747 TALOS-2023-1908 - Adobe Acrobat Reader Font CharStrings INDEX out-of-bounds read vulnerability — Acrobat Reader CWE-125 5.5 Medium 2024-02-15
CVE-2024-20748 TALOS-2023-1909 - Adobe Acrobat Reader Font avar SegmentMaps out-of-bounds read vulnerability — Acrobat Reader CWE-125 5.5 Medium 2024-02-15
CVE-2024-20734 ZDI-CAN-22516: Adobe Acrobat Pro DC AcroForm Use-After-Free Information Disclosure Vulnerability — Acrobat Reader CWE-416 5.5 Medium 2024-02-15
CVE-2024-20728 ZDI-CAN-22727: Adobe Acrobat Pro DC Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability — Acrobat Reader CWE-787 7.8 High 2024-02-15
CVE-2024-20736 ZDI-CAN-22822: Adobe Acrobat Pro DC AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability — Acrobat Reader CWE-125 5.5 Medium 2024-02-15
CVE-2024-20749 TALOS-2023-1910 - Adobe Acrobat Reader Font CharStrings CharStringsOffset out-of-bounds read vulnerability — Acrobat Reader CWE-125 5.5 Medium 2024-02-15
CVE-2024-20729 TALOS-2023-1890 - Adobe Acrobat Reader Annot3D object zoom event use-after-free vulnerability — Acrobat Reader CWE-416 7.8 High 2024-02-15
CVE-2024-20735 TALOS-2023-1905 - Adobe Acrobat Reader Font CPAL numColorRecords out-of-bounds read vulnerability — Acrobat Reader CWE-125 5.5 Medium 2024-02-15
CVE-2024-20744 Adobe Substance 3D Paint PICT Parsing Access Violation Write Vulnerability — Substance3D - Painter CWE-787 7.8 High 2024-02-15
CVE-2024-20724 Adobe Substance 3D Painter v9.0.1Build2822 OOBR Vulnerability II — Substance3D - Painter CWE-125 5.5 Medium 2024-02-15
CVE-2024-20743 Adobe Substance 3D Paint PSD Parsing Out-Of-Bounds Write Vulnerability — Substance3D - Painter CWE-787 7.8 High 2024-02-15
CVE-2024-20722 Adobe Substance 3D Painter v9.0.1Build2822 OOBR Vulnerability III — Substance3D - Painter CWE-125 5.5 Medium 2024-02-15
CVE-2024-20740 Adobe Substance 3D Paint PSD Parsing Out-Of-Bounds Write Vulnerability — Substance3D - Painter CWE-787 7.8 High 2024-02-15
CVE-2024-20742 Adobe Substance 3D Paint RAS File Parsing Out-Of-Bounds Read Vulnerability — Substance3D - Painter CWE-125 7.8 High 2024-02-15
CVE-2024-20741 Adobe Substance 3D Paint ICO Parsing Access Violation Write Vulnerability — Substance3D - Painter CWE-123 7.8 High 2024-02-15

This page lists every published CVE security advisory associated with Adobe. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.