Adobe

Records8047All Threatist records

Exploited (KEV)83In CISA KEV

CVSS critical1940CVSS 9.0–10.0

CVSS high3102CVSS 7.0–8.9

Exploited now

Adobe records in CISA KEV

TI-2026-35762 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-50010 Adobe Commerce and Magento Incorrect Authorization Vulnerability CRITICAL 98KEV 2026-09-24 TI-2026-52938 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CRITICAL 100KEV 2026-09-08 TI-2026-35688 Adobe ColdFusion Path Traversal Vulnerability CRITICAL 100KEV 2026-07-07 TI-2009-03297 Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability CRITICAL 97KEV 2026-05-20 TI-2020-07801 Adobe Acrobat Use-After-Free Vulnerability CRITICAL 93KEV 2026-04-13

Components

Products in the NVD configurations · select one to filter the records

Acrobat Dc 1832 records CRITICAL Acrobat Reader Dc 1832 records CRITICAL Acrobat 1414 records CRITICAL Experience Manager 1299 records HIGH Acrobat Reader 1085 records CRITICAL Flash Player 1084 records CRITICAL Air 413 records CRITICAL Air Sdk 409 records CRITICAL

Records

13 records in Flash Media Server · all components

TI-2010-03461 CVE-2010-3635 · GHSA-v556-c5qj-prp8

Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before…

MEDIUM 52

Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0.1 allows attackers to execute arbitrary code via unspecified vectors, related to a "segmentation fault vulnerability."

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05887 Published 2010-11-10 No fix listed CWE-94

TI-2010-02126 CVE-2010-2217 · GHSA-qvjv-vp7f-48ch

Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to…

MEDIUM 50

Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to execute arbitrary code via unspecified vectors, related to a "JS method vulnerability."

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04521 Published 2010-08-11 No fix listed CWE-94

TI-2009-03602 CVE-2009-3792 · GHSA-365m-rf96-qxh8

Directory traversal vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows…

MEDIUM 50

Directory traversal vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to load arbitrary DLL files via unspecified vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04067 Published 2009-12-21 No fix listed CWE-22

TI-2009-03601 CVE-2009-3791 · GHSA-9rgw-x23v-g78g

Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers…

MEDIUM 44

Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to cause a denial of service (resource exhaustion) via unknown vectors.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02593 Published 2009-12-21 No fix listed CWE-400

TI-2009-01298 CVE-2009-1365 · GHSA-vp62-q8f3-wccv

Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.4 and 3.5.x before…

LOW 39

Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.4 and 3.5.x before 3.5.2, as used in Flash Media Interactive Server and Flash Media Streaming Server, allows remote attackers to execute arbitrary re…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03329 Published 2009-05-01 No fix listed

TI-2011-01855 CVE-2011-2132 · GHSA-65hf-52h7-63gq

Adobe Flash Media Server (FMS) before 3.5.7, and 4.x before 4.0.3, allows attackers to…

LOW 34

Adobe Flash Media Server (FMS) before 3.5.7, and 4.x before 4.0.3, allows attackers to cause a denial of service (memory corruption) via unspecified vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.08467 Published 2011-08-11 No fix listed CWE-119

TI-2010-03460 CVE-2010-3634 · GHSA-68x9-rcmx-ph7w

Unspecified vulnerability in the edge process in Adobe Flash Media Server (FMS) 3.0.x…

LOW 29

Unspecified vulnerability in the edge process in Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0.1 allows attackers to cause a denial of service via unknown vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03688 Published 2010-11-10 No fix listed

TI-2010-03459 CVE-2010-3633 · GHSA-mc9w-8jq6-cprp

Memory leak in Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and…

LOW 29

Memory leak in Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0.1 allows attackers to cause a denial of service (memory consumption) via unspecified vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03688 Published 2010-11-10 No fix listed CWE-399

TI-2010-02129 CVE-2010-2220 · GHSA-qx9v-hvpm-x8mw

Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to…

LOW 28

Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service via unspecified vectors, related to an "input validation issue."

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02482 Published 2010-08-11 No fix listed

TI-2010-02128 CVE-2010-2219 · GHSA-wcvx-p6p6-6q32

Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x…

LOW 28

Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service (memory consumption) via unknown vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02482 Published 2010-08-11 No fix listed CWE-399

TI-2010-02127 CVE-2010-2218 · GHSA-mjc9-r93p-f353

Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to…

LOW 28

Adobe Flash Media Server (FMS) before 3.0.6, and 3.5.x before 3.5.4, allows attackers to cause a denial of service via unspecified vectors, related to a "JS method issue."

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02482 Published 2010-08-11 No fix listed

TI-2011-00535 CVE-2011-0612 · GHSA-8899-823h-hwr3

Adobe Flash Media Server (FMS) before 3.5.6, and 4.x before 4.0.2, allows remote…

LOW 27

Adobe Flash Media Server (FMS) before 3.5.6, and 4.x before 4.0.2, allows remote attackers to cause a denial of service (XML data corruption) via unspecified vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02174 Published 2011-05-16 No fix listed CWE-399

TI-2008-04860 CVE-2008-5109 · GHSA-x9v6-pr54-q32q

The default configuration of Adobe Flash Media Server (FMS) 3.0 does not enable SWF…

LOW 27

The default configuration of Adobe Flash Media Server (FMS) 3.0 does not enable SWF Verification for (1) RTMPE and (2) RTMPTE sessions, which makes it easier for remote attackers to make copies of video content via strea…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0231 Published 2008-11-25 No fix listed CWE-16

Open these records in search →

Critical	1940
High	3102
Medium	2864
Low	140
No CVSS	1