Read the docs

Adobe

Records8047All Threatist records
Exploited (KEV)83In CISA KEV
CVSS critical1940CVSS 9.0–10.0
CVSS high3102CVSS 7.0–8.9

Exploited now

Adobe records in CISA KEV
TI-2026-35762 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-50010 Adobe Commerce and Magento Incorrect Authorization Vulnerability Priority CRITICAL 98KEV 2026-09-24TI-2026-52938 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Priority CRITICAL 100KEV 2026-09-08TI-2026-35688 Adobe ColdFusion Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-07-07TI-2009-03297 Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2026-05-20TI-2020-07801 Adobe Acrobat Use-After-Free Vulnerability Priority CRITICAL 93KEV 2026-04-13

Components

Products in the NVD configurations · select one to filter the records
Acrobat Dc 1832 records CRITICAL Acrobat Reader Dc 1832 records CRITICAL Acrobat 1414 records CRITICAL Experience Manager 1299 records HIGH Acrobat Reader 1085 records CRITICAL Flash Player 1084 records CRITICAL Air 413 records CRITICAL Air Sdk 409 records CRITICAL

Records

16 records in Creative Cloud Desktop Application · all components

TI-2020-07769 CVE-2020-9682 · GHSA-v9pw-w8q4-wvjx

Link following in Adobe Creative Cloud Desktop Application

Priority MEDIUM 49

Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04306 Published 2020-07-17 No fix listed CWE-59
TI-2020-07757 CVE-2020-9670 · GHSA-f35f-35hv-6fqx

Link following in Adobe Creative Cloud Desktop Application

Priority MEDIUM 48

Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03555 Published 2020-07-16 No fix listed CWE-59
TI-2021-04175 CVE-2021-21069 · GHSA-h3f9-x7c2-q5h9

Adobe Creative Cloud Privilege Escalation Vulnerability

Priority MEDIUM 41

Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.02636 Published 2021-03-12 No fix listed CWE-20
TI-2021-09623 CVE-2021-28547 · GHSA-7xwr-7pqp-xmjv

Adobe Creative Cloud for macOS Privilege Escalation Vulnerability

Priority LOW 37

Adobe Creative Cloud Desktop Application for macOS version 5.3 (and earlier) is affected by a privilege escalation vulnerability that could allow a normal user to delete the OOBE directory and get permissions of any dire…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.0052 Published 2021-09-29 No fix listed CWE-20
TI-2026-35750 CVE-2026-48344 · GHSA-q3wj-mx7q-rfv9

GoCart | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)

Priority LOW 35

Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00171 Published 2026-07-14 Fixed in 6.10.0.252.3 CWE-367
TI-2026-35680 CVE-2026-48272 · GHSA-wq6c-cg2f-6555

Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)

Priority LOW 35

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00227 Published 2026-07-14 Fixed in 6.10.0.252.3 CWE-427
TI-2021-09683 CVE-2021-28613 · GHSA-mm62-qgr2-384q

Adobe Creative Cloud Arbitrary File Overwrite Vulnerability

Priority LOW 33

Adobe Creative Cloud Desktop Application version 5.4 (and earlier) is affected by a file handling vulnerability that could allow an attacker to arbitrarily overwrite a file.

CVSS 3.1HIGH 7.4 Local High privileges User interaction EPSS 0.00487 Published 2021-09-27 No fix listed CWE-379
TI-2021-04184 CVE-2021-21078 · GHSA-m37j-xrjp-4fj2

Adobe Creative Cloud Unquoted Service Path in CCXProcess

Priority LOW 33

Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of th…

CVSS 3.1MEDIUM 6.5 Local High privileges User interaction EPSS 0.01079 Published 2021-03-12 No fix listed CWE-426
TI-2021-04174 CVE-2021-21068 · GHSA-jxwm-wcqc-fgcc

Adobe Creative Cloud installer arbitrary file overwrite vulnerability

Priority LOW 30

Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by a file handling vulnerability that could allow an attacker to cause arbitrary file overwriting.

CVSS 3.1MEDIUM 6.1 Physical High privileges User interaction EPSS 0.00619 Published 2021-03-12 No fix listed CWE-379
TI-2021-09703 CVE-2021-28633 · GHSA-g7f3-p5rj-hpx5

Adobe Creative Cloud Installer Arbitrary File Write

Priority LOW 28

Adobe Creative Cloud Desktop Application (installer) version 2.4 (and earlier) is affected by an Insecure temporary file creation vulnerability.

CVSS 3.1MEDIUM 6.1 Physical High privileges User interaction EPSS 0.00487 Published 2021-08-24 No fix listed CWE-379
TI-2021-19085 CVE-2021-43017 · GHSA-85rf-rp2v-42mg

Adobe Creative Cloud DLL Hijacking Local Application Denial of Service

Priority LOW 22

Adobe Creative Cloud version 5.5 (and earlier) are affected by an Application denial of service vulnerability in the Creative Cloud Desktop installer.

CVSS 3.1MEDIUM 4.2 Local High privileges User interaction EPSS 0.01172 Published 2021-11-18 No fix listed CWE-379
Open these records in search →