Adobe

Records8047All Threatist records

Exploited (KEV)83In CISA KEV

CVSS critical1940CVSS 9.0–10.0

CVSS high3102CVSS 7.0–8.9

Exploited now

Adobe records in CISA KEV

TI-2026-35762 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-50010 Adobe Commerce and Magento Incorrect Authorization Vulnerability CRITICAL 98KEV 2026-09-24 TI-2026-52938 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CRITICAL 100KEV 2026-09-08 TI-2026-35688 Adobe ColdFusion Path Traversal Vulnerability CRITICAL 100KEV 2026-07-07 TI-2009-03297 Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability CRITICAL 97KEV 2026-05-20 TI-2020-07801 Adobe Acrobat Use-After-Free Vulnerability CRITICAL 93KEV 2026-04-13

Components

Products in the NVD configurations · select one to filter the records

Acrobat Dc 1832 records CRITICAL Acrobat Reader Dc 1832 records CRITICAL Acrobat 1414 records CRITICAL Experience Manager 1299 records HIGH Acrobat Reader 1085 records CRITICAL Flash Player 1084 records CRITICAL Air 413 records CRITICAL Air Sdk 409 records CRITICAL

Records

413 records in Air · all components

TI-2016-00916 CVE-2016-1010 · GHSA-rf44-cp45-ppcv

Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before…

CRITICAL 97KEV

Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Ado…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.19333 Published 2016-03-12 Fixed CWE-190

TI-2015-07113 CVE-2015-8651 · GHSA-8p63-f9jh-3gch

Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before…

CRITICAL 97KEV

Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe A…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.67698 Published 2015-12-28 Fixed CWE-190

TI-2014-06928 CVE-2014-8439 · GHSA-w62w-9g5v-w3p4

Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and…

CRITICAL 97KEV

Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler be…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.20369 Published 2014-11-25 Fixed CWE-416

TI-2011-00532 CVE-2011-0609 · GHSA-g9g3-3gv9-454q

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac…

CRITICAL 93KEV

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle)…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.63507 Published 2011-03-15 Fixed

TI-2010-01252 CVE-2010-1297 · GHSA-cv7g-qpjc-66p7

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before…

CRITICAL 93KEV

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.82531 Published 2010-06-08 Fixed CWE-787

TI-2012-01807 CVE-2012-2034 · GHSA-3cfr-rpp6-j86f

Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS…

CRITICAL 92KEV

Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on An…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.07713 Published 2012-06-09 Fixed CWE-119

TI-2015-02739 CVE-2015-3105 · GHSA-rvwq-c757-x9gx

Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows…

CRITICAL 86

Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe A…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.90135 Published 2015-06-10 Fixed CWE-119

TI-2015-02725 CVE-2015-3090 · GHSA-93v5-5c97-fgrr

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows…

HIGH 84

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compile…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.8318 Published 2015-05-13 Fixed CWE-119

TI-2014-06929 CVE-2014-8440 · GHSA-r45g-2ph5-pcv3

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and…

HIGH 83

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler be…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.81943 Published 2014-11-11 Fixed

TI-2015-02722 CVE-2015-3087 · GHSA-xg66-qgpw-4765

Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before…

HIGH 81

Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Ado…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.74294 Published 2015-05-13 Fixed CWE-189

TI-2015-04683 CVE-2015-5560 · GHSA-hcv2-rj94-5cj5

Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before…

HIGH 79

Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.65956 Published 2015-08-14 Fixed CWE-189

TI-2015-02723 CVE-2015-3088 · GHSA-3g79-rhqv-wh3r

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x…

HIGH 78

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.17…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.61978 Published 2015-05-13 Fixed CWE-119

TI-2013-04569 CVE-2013-5331 · GHSA-57g5-r5h9-q5pf

Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on…

HIGH 78

Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK &…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.72495 Published 2013-12-11 Fixed CWE-94

TI-2015-02715 CVE-2015-3080 · GHSA-h269-r68v-hpf3

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through…

HIGH 76

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.56552 Published 2015-05-13 Fixed

TI-2015-04311 CVE-2015-5134 · GHSA-pf53-c66w-fcfv

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X…

HIGH 74

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.50286 Published 2015-08-14 Fixed

TI-2015-04310 CVE-2015-5133 · GHSA-xgpm-hq77-53g9

Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before…

HIGH 74

Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 a…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.50728 Published 2015-08-14 Fixed CWE-119

TI-2015-04309 CVE-2015-5132 · GHSA-mv5r-33xg-53v7

Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before…

HIGH 74

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.50728 Published 2015-08-14 Fixed CWE-119

TI-2015-04308 CVE-2015-5131 · GHSA-h2j6-rj2w-2v6v

Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before…

HIGH 74

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.50728 Published 2015-08-14 Fixed CWE-119

TI-2015-04307 CVE-2015-5130 · GHSA-3m3m-fw9q-ff94

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X…

HIGH 74

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.50286 Published 2015-08-14 Fixed

TI-2015-04305 CVE-2015-5127 · GHSA-jpxh-hqf8-qfjv

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X…

HIGH 74

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.50286 Published 2015-08-14 Fixed

TI-2007-05757 CVE-2007-6019 · GHSA-9g7g-pmg2-qx9r

Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote…

HIGH 74

Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a modified DeclareFunction2 Actionscript tag, which prevents an object from being…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.5977 Published 2008-04-09 Fixed

TI-2015-02728 CVE-2015-3093 · GHSA-h7r4-xwmg-vhmr

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows…

HIGH 73

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.47615 Published 2015-05-13 Fixed CWE-119

TI-2015-02724 CVE-2015-3089 · GHSA-mg8j-625f-vxhc

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows…

HIGH 73

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.47615 Published 2015-05-13 Fixed CWE-119

TI-2015-06954 CVE-2015-8434 · GHSA-527f-55jf-2wm4

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x…

HIGH 72

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204,…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.43408 Published 2015-12-10 Fixed

TI-2015-06951 CVE-2015-8431 · GHSA-f87f-4hc3-c786

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x…

HIGH 72

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.43408 Published 2015-12-10 Fixed

Open these records in search →

Critical	1940
High	3102
Medium	2864
Low	140
No CVSS	1