Adobe

Records8047All Threatist records

Exploited (KEV)83In CISA KEV

CVSS critical1940CVSS 9.0–10.0

CVSS high3102CVSS 7.0–8.9

Exploited now

Adobe records in CISA KEV

TI-2026-35762 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-50010 Adobe Commerce and Magento Incorrect Authorization Vulnerability CRITICAL 98KEV 2026-09-24 TI-2026-52938 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CRITICAL 100KEV 2026-09-08 TI-2026-35688 Adobe ColdFusion Path Traversal Vulnerability CRITICAL 100KEV 2026-07-07 TI-2009-03297 Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability CRITICAL 97KEV 2026-05-20 TI-2020-07801 Adobe Acrobat Use-After-Free Vulnerability CRITICAL 93KEV 2026-04-13

Components

Products in the NVD configurations · select one to filter the records

Acrobat Dc 1832 records CRITICAL Acrobat Reader Dc 1832 records CRITICAL Acrobat 1414 records CRITICAL Experience Manager 1299 records HIGH Acrobat Reader 1085 records CRITICAL Flash Player 1084 records CRITICAL Air 413 records CRITICAL Air Sdk 409 records CRITICAL

Records

22 records in Dreamweaver · all components

TI-2018-03492 CVE-2018-4924 · GHSA-cf6v-j66p-w88f

OS command injection in Adobe Dreamweaver CC 18.0 and earlier versions

MEDIUM 57

Adobe Dreamweaver CC versions 18.0 and earlier have an OS Command Injection vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.14009 Published 2018-05-19 No fix listed CWE-78

TI-2010-02993 CVE-2010-3132 · GHSA-638c-cq5x-v2qp

Untrusted search path vulnerability in Adobe Dreamweaver CS5 11.0 build 4916, build 4909…

MEDIUM 55

Untrusted search path vulnerability in Adobe Dreamweaver CS5 11.0 build 4916, build 4909, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijackin…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.14037 Published 2010-08-26 No fix listed

TI-2026-17172 CVE-2026-21267 · GHSA-5qvq-c496-46j2

OS command injection in Adobe Dreamweaver Desktop

MEDIUM 41

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an…

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.0083 Published 2026-01-13 Fixed in 21.7 CWE-78

TI-2006-01987 CVE-2006-2042 · GHSA-jrw9-cj7c-rq2j

Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection…

MEDIUM 41

Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the (1) ColdFusion, (2) PHP mySQL, (3) ASP, (4) ASP.NET, and (5) JSP server models.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05496 Published 2006-05-09 No fix listed

TI-2019-05634 CVE-2019-7956 · GHSA-6gg9-j293-hp7q

Uncontrolled search path in Adobe Dreamweaver

MEDIUM 40

Adobe Dreamweaver direct download installer versions 19.0 and below, 18.0 and below have an Insecure Library Loading (DLL hijacking) vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.03279 Published 2019-07-18 No fix listed CWE-427

TI-2026-17176 CVE-2026-21272 · GHSA-8w2g-vq5j-7x37

Dreamweaver Desktop | Improper Input Validation (CWE-20)

LOW 39

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00234 Published 2026-01-13 Fixed in 21.7 CWE-20

TI-2026-17175 CVE-2026-21271 · GHSA-m34w-rgmx-fr6x

Dreamweaver Desktop | Improper Input Validation (CWE-20)

LOW 39

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00255 Published 2026-01-13 Fixed in 21.7 CWE-20

TI-2026-17173 CVE-2026-21268 · GHSA-wx29-4qhg-c2f3

Dreamweaver Desktop | Improper Input Validation (CWE-20)

LOW 39

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00255 Published 2026-01-13 Fixed in 21.7 CWE-20

TI-2019-05017 CVE-2019-7097 · GHSA-pmp3-7925-h764

Adobe Dreamweaver versions 19.0 and earlier have an insecure protocol implementation…

LOW 39

Adobe Dreamweaver versions 19.0 and earlier have an insecure protocol implementation vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03592 Published 2019-05-23 No fix listed

TI-2026-35355 CVE-2026-47907 · GHSA-5wmq-h34r-hmrf

Dreamweaver Desktop | Improper Access Control (CWE-284)

LOW 38

Dreamweaver Desktop versions 21.7 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00168 Published 2026-06-09 Fixed in 21.8 CWE-284

TI-2026-35354 CVE-2026-47906 · GHSA-2c25-6vf9-jx44

Dreamweaver Desktop | Dependency on Vulnerable Third-Party Component (CWE-1395)

LOW 38

Dreamweaver Desktop versions 21.7 and earlier are affected by a Dependency on Vulnerable Third-Party Component vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00177 Published 2026-06-09 Fixed in 21.8 CWE-1395

TI-2025-34087 CVE-2025-54256 · GHSA-vjpr-5m84-xxg2

Dreamweaver Desktop | Cross-Site Request Forgery (CSRF) (CWE-352)

LOW 38

Dreamweaver Desktop versions 21.5 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00171 Published 2025-09-09 No fix listed CWE-352

TI-2024-20057 CVE-2024-30314 · GHSA-9c42-7gw7-4ffx

OS command injection in Adobe Dreamweaver Desktop

LOW 38

Dreamweaver Desktop versions 21.3 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00865 Published 2024-05-16 No fix listed CWE-78

TI-2026-17178 CVE-2026-21274 · GHSA-6936-mvf7-vfp7

Dreamweaver Desktop | Incorrect Authorization (CWE-863)

LOW 36

Dreamweaver Desktop versions 21.6 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00244 Published 2026-01-13 Fixed in 21.7 CWE-863

TI-2025-21628 CVE-2025-30310 · GHSA-5cxq-3w6r-vj7g

Dreamweaver Desktop | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)

LOW 36

Dreamweaver Desktop versions 21.4 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current use…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00327 Published 2025-05-13 No fix listed CWE-843

TI-2026-35356 CVE-2026-47908 · GHSA-rrmh-w6hx-2f5g

Dreamweaver Desktop | Access of Uninitialized Pointer (CWE-824)

LOW 35

Dreamweaver Desktop versions 21.7 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00161 Published 2026-06-09 Fixed in 21.8 CWE-824

TI-2020-14962 CVE-2020-24425 · GHSA-mjr6-9x82-8cgp

Privilege escalation vulnerability in Dreamweaver version 20.2

LOW 35

Dreamweaver version 20.2 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00676 Published 2020-10-21 No fix listed CWE-427

TI-2005-04438 CVE-2005-4708 · GHSA-54pm-xxpg-8wgg

Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing…

LOW 34

Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group permitted to configure the service, including the path to exec…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.0122 Published 2006-02-02 No fix listed

TI-2021-04161 CVE-2021-21055 · GHSA-x4c3-xfxx-vh9f

Adobe Dreamweaver Untrusted Search Path Vulnerability Could Lead To Information Disclosure

LOW 31

Adobe Dreamweaver versions 21.0 (and earlier) and 20.2 (and earlier) is affected by an untrusted search path vulnerability that could result in information disclosure.

CVSS 3.1MEDIUM 6.2 Physical Low privileges User interaction EPSS 0.00794 Published 2021-02-11 No fix listed CWE-426

TI-2026-35358 CVE-2026-47910 · GHSA-4pfm-pggq-vxqq

Dreamweaver Desktop | Incorrect Authorization (CWE-863)

LOW 27

Dreamweaver Desktop versions 21.7 and earlier are affected by an Incorrect Authorization vulnerability that could lead to arbitrary file system read.

CVSS 3.1MEDIUM 6.3 Local No auth User interaction EPSS 0.00137 Published 2026-06-09 Fixed in 21.8 CWE-863

TI-2026-35357 CVE-2026-47909 · GHSA-4v5c-8h8p-7gh3

Dreamweaver Desktop | Improper Input Validation (CWE-20)

LOW 27

Dreamweaver Desktop versions 21.7 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read.

CVSS 3.1MEDIUM 6.3 Local No auth User interaction EPSS 0.00148 Published 2026-06-09 Fixed in 21.8 CWE-20

TI-2008-05757 CVE-2008-6062 · GHSA-m227-w3jm-cmgq

Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash…

LOW 23

Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by Adobe Dreamweaver, when the Insert Flash Video feature is used, allows remote attackers to inject arbitrary web…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01659 Published 2009-02-05 No fix listed CWE-79

Open these records in search →

Critical	1940
High	3102
Medium	2864
Low	140
No CVSS	1