Read the docs

Adobe

Records8047All Threatist records
Exploited (KEV)83In CISA KEV
CVSS critical1940CVSS 9.0–10.0
CVSS high3102CVSS 7.0–8.9

Exploited now

Adobe records in CISA KEV
TI-2026-35762 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-50010 Adobe Commerce and Magento Incorrect Authorization Vulnerability Priority CRITICAL 98KEV 2026-09-24TI-2026-52938 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Priority CRITICAL 100KEV 2026-09-08TI-2026-35688 Adobe ColdFusion Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-07-07TI-2009-03297 Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2026-05-20TI-2020-07801 Adobe Acrobat Use-After-Free Vulnerability Priority CRITICAL 93KEV 2026-04-13

Components

Products in the NVD configurations · select one to filter the records
Acrobat Dc 1832 records CRITICAL Acrobat Reader Dc 1832 records CRITICAL Acrobat 1414 records CRITICAL Experience Manager 1299 records HIGH Acrobat Reader 1085 records CRITICAL Flash Player 1084 records CRITICAL Air 413 records CRITICAL Air Sdk 409 records CRITICAL

Records

71 records in Digital Editions · all components

TI-2018-09188 CVE-2018-12814 · GHSA-m2p9-m7m4-j74c

Out-of-bounds write in Adobe Digital Editions

Priority MEDIUM 55

Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.11215 Published 2018-10-17 No fix listed CWE-787
TI-2018-09187 CVE-2018-12813 · GHSA-q82x-j74h-g64v

Out-of-bounds write in Adobe Digital Editions

Priority MEDIUM 55

Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.11215 Published 2018-10-17 No fix listed CWE-787
TI-2019-05015 CVE-2019-7095 · GHSA-7hv5-hxph-jxm3

Out-of-bounds write in Adobe Digital Editions

Priority MEDIUM 54

Adobe Digital Editions versions 4.5.10.185749 and below have a heap overflow vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.09093 Published 2019-05-24 No fix listed CWE-787
TI-2018-09197 CVE-2018-12823 · GHSA-c3fp-f3f2-wvjq

Out-of-bounds write in Adobe Digital Editions

Priority MEDIUM 53

Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.08299 Published 2018-10-17 No fix listed CWE-787
TI-2018-09196 CVE-2018-12822 · GHSA-f82j-65hc-2f9m

Use after free in Adobe Digital Editions

Priority MEDIUM 53

Adobe Digital Editions versions 4.5.8 and below have an use after free vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.08033 Published 2018-10-17 No fix listed CWE-416
TI-2017-08317 CVE-2017-11274 · GHSA-j4cx-p8j9-2c3m

Use after free in Adobe Digital Editions

Priority MEDIUM 53

Adobe Digital Editions 4.5.4 and earlier has an exploitable use after free vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0872 Published 2017-08-11 No fix listed CWE-416
TI-2020-03275 CVE-2020-3760 · GHSA-6r4h-q33h-6j2h

Command injection in Adobe Digital Editions

Priority MEDIUM 52

Adobe Digital Editions versions 4.5.10 and below have a command injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0715 Published 2020-02-13 No fix listed CWE-77
TI-2017-02308 CVE-2017-3088 · GHSA-g3x4-fj7h-x4vf

Memory corruption in Adobe Digital Editions 4.5.4 and earlier.

Priority MEDIUM 52

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF runtime engine.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.06152 Published 2017-06-20 No fix listed CWE-119
TI-2017-02316 CVE-2017-3096 · GHSA-5x43-q52x-5h3j

Memory corruption in Adobe Digital Editions 4.5.4 and earlier.

Priority MEDIUM 51

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the character code mapping module.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06152 Published 2017-06-20 No fix listed CWE-119
TI-2017-02315 CVE-2017-3095 · GHSA-cxw6-rf59-r25r

Memory corruption in Adobe Digital Editions 4.5.4 and earlier.

Priority MEDIUM 51

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF parsing engine.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06152 Published 2017-06-20 No fix listed CWE-119
TI-2017-02314 CVE-2017-3094 · GHSA-fwr2-2xv7-44g4

Memory corruption in Adobe Digital Editions 4.5.4 and earlier.

Priority MEDIUM 51

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF processing engine.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06152 Published 2017-06-20 No fix listed CWE-119
TI-2017-02313 CVE-2017-3093 · GHSA-g4wj-v8j2-gvc7

Memory corruption in Adobe Digital Editions 4.5.4 and earlier.

Priority MEDIUM 51

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the bitmap representation module.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06152 Published 2017-06-20 No fix listed CWE-119
TI-2017-02309 CVE-2017-3089 · GHSA-5749-xwq9-5f2j

Memory corruption in Adobe Digital Editions 4.5.4 and earlier.

Priority MEDIUM 51

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF imaging model.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06152 Published 2017-06-20 No fix listed CWE-119
TI-2016-03651 CVE-2016-4262 · GHSA-9mp7-5fjg-f78g

Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a…

Priority MEDIUM 50

Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256, CVE-2016-4257, CVE-20…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04844 Published 2016-09-16 No fix listed CWE-119
TI-2016-03650 CVE-2016-4261 · GHSA-ggg2-84w8-xg7j

Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a…

Priority MEDIUM 50

Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256, CVE-2016-4257, CVE-20…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04844 Published 2016-09-16 No fix listed CWE-119
TI-2016-03649 CVE-2016-4260 · GHSA-pqg6-7xfp-mj84

Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a…

Priority MEDIUM 50

Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256, CVE-2016-4257, CVE-20…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04844 Published 2016-09-16 No fix listed CWE-119
TI-2016-03648 CVE-2016-4259 · GHSA-qwj9-2pgw-wwcr

Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a…

Priority MEDIUM 50

Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4256, CVE-2016-4257, CVE-20…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04844 Published 2016-09-16 No fix listed CWE-119
Load more
Open these records in search →