Adobe

Records8047All Threatist records

Exploited (KEV)83In CISA KEV

CVSS critical1940CVSS 9.0–10.0

CVSS high3102CVSS 7.0–8.9

Exploited now

Adobe records in CISA KEV

TI-2026-35762 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-50010 Adobe Commerce and Magento Incorrect Authorization Vulnerability CRITICAL 98KEV 2026-09-24 TI-2026-52938 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CRITICAL 100KEV 2026-09-08 TI-2026-35688 Adobe ColdFusion Path Traversal Vulnerability CRITICAL 100KEV 2026-07-07 TI-2009-03297 Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability CRITICAL 97KEV 2026-05-20 TI-2020-07801 Adobe Acrobat Use-After-Free Vulnerability CRITICAL 93KEV 2026-04-13

Components

Products in the NVD configurations · select one to filter the records

Acrobat Dc 1832 records CRITICAL Acrobat Reader Dc 1832 records CRITICAL Acrobat 1414 records CRITICAL Experience Manager 1299 records HIGH Acrobat Reader 1085 records CRITICAL Flash Player 1084 records CRITICAL Air 413 records CRITICAL Air Sdk 409 records CRITICAL

Records

21 records in Flash Player For Linux · all components

TI-2008-05216 CVE-2008-5499 · GHSA-jmfj-rgc6-43mh

Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and…

HIGH 80

Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.79426 Published 2008-12-18 Fixed CWE-94

TI-2009-00500 CVE-2009-0520 · GHSA-8fmr-hfvg-xqm4

Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly…

MEDIUM 63

Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.28484 Published 2009-02-26 Fixed CWE-119

TI-2009-00499 CVE-2009-0519 · GHSA-x3v4-9m46-pvqg

Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before…

MEDIUM 56

Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a crafted Shockw…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.14764 Published 2009-02-26 Fixed CWE-20

TI-2016-00867 CVE-2016-0959 · GHSA-xhrc-66pf-63mr

Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267…

MEDIUM 50

Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google Chrome before 20.0.0.267, Adobe Flash Pla…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05205 Published 2017-06-27 Fixed CWE-416

TI-2016-06609 CVE-2016-7865 · GHSA-x6f3-5p3j-rpv9

Incorrect type conversion in Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and…

MEDIUM 48

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0724 Published 2016-11-08 Fixed CWE-704

TI-2016-06608 CVE-2016-7864 · GHSA-3vxq-cppx-jr4w

Use after free in Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier

MEDIUM 48

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.07041 Published 2016-11-08 Fixed CWE-416

TI-2016-06607 CVE-2016-7863 · GHSA-qff9-cfrr-c89x

Use after free in Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier

MEDIUM 48

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.07101 Published 2016-11-08 Fixed CWE-416

TI-2016-06606 CVE-2016-7862 · GHSA-99hx-q9vj-363m

Use after free in Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier

MEDIUM 48

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.07101 Published 2016-11-08 Fixed CWE-416

TI-2016-06605 CVE-2016-7861 · GHSA-9mc5-qvqr-xx6p

Incorrect type conversion in Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and…

MEDIUM 48

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.07301 Published 2016-11-08 Fixed CWE-704

TI-2016-06604 CVE-2016-7860 · GHSA-gf2c-mwwh-x43r

Incorrect type conversion in Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and…

MEDIUM 48

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.07301 Published 2016-11-08 Fixed CWE-704

TI-2016-06603 CVE-2016-7859 · GHSA-955x-p5qj-g2mp

Use after free in Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier

MEDIUM 48

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.07041 Published 2016-11-08 Fixed CWE-416

TI-2016-06602 CVE-2016-7858 · GHSA-3w49-24q7-cxjq

Use after free in Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier

MEDIUM 48

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.07041 Published 2016-11-08 Fixed CWE-416

TI-2016-06601 CVE-2016-7857 · GHSA-f6hw-cgjw-5hhp

Use after free in Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier

MEDIUM 48

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.07041 Published 2016-11-08 Fixed CWE-416

TI-2010-02125 CVE-2010-2216 · GHSA-248p-gq7w-24rp

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3…

MEDIUM 47

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different v…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0459 Published 2010-08-11 Fixed CWE-94

TI-2010-02123 CVE-2010-2214 · GHSA-fhc9-8cx6-h467

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3…

MEDIUM 47

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0459 Published 2010-08-11 Fixed CWE-94

TI-2010-02122 CVE-2010-2213 · GHSA-89mr-5p7g-mp6c

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3…

MEDIUM 47

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0459 Published 2010-08-11 Fixed CWE-94

TI-2010-00202 CVE-2010-0209 · GHSA-cc4q-35f8-jwmg

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3…

MEDIUM 47

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0459 Published 2010-08-11 Fixed CWE-94

TI-2009-00106 CVE-2009-0114 · GHSA-j6cw-fqgq-9q8c

Unspecified vulnerability in the Settings Manager in Adobe Flash Player 9.x before…

LOW 33

Unspecified vulnerability in the Settings Manager in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87, and possibly other versions, allows remote attackers to trick a user into visiting an arbitrary URL…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.03847 Published 2009-02-26 No fix listed

TI-2010-02124 CVE-2010-2215 · GHSA-5rh8-5qgm-3qcp

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3…

LOW 27

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a "click-jacking" issue.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03849 Published 2010-08-11 Fixed

TI-2009-00502 CVE-2009-0522 · GHSA-qr6w-h8jw-cw4j

Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Windows allows…

LOW 25

Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Windows allows remote attackers to trick a user into visiting an arbitrary URL via an unspecified manipulation of the "mouse pointer display," related…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02701 Published 2009-02-26 No fix listed

TI-2009-00501 CVE-2009-0521 · GHSA-h35j-98vm-989g

Untrusted search path vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x…

LOW 23

Untrusted search path vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Linux allows local users to obtain sensitive information or gain privileges via a crafted library in a director…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.01055 Published 2009-02-26 Fixed CWE-200

Open these records in search →

Critical	1940
High	3102
Medium	2864
Low	140
No CVSS	1