Adobe

Records8047All Threatist records

Exploited (KEV)83In CISA KEV

CVSS critical1940CVSS 9.0–10.0

CVSS high3102CVSS 7.0–8.9

Exploited now

Adobe records in CISA KEV

TI-2026-35762 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-50010 Adobe Commerce and Magento Incorrect Authorization Vulnerability CRITICAL 98KEV 2026-09-24 TI-2026-52938 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CRITICAL 100KEV 2026-09-08 TI-2026-35688 Adobe ColdFusion Path Traversal Vulnerability CRITICAL 100KEV 2026-07-07 TI-2009-03297 Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability CRITICAL 97KEV 2026-05-20 TI-2020-07801 Adobe Acrobat Use-After-Free Vulnerability CRITICAL 93KEV 2026-04-13

Components

Products in the NVD configurations · select one to filter the records

Acrobat Dc 1832 records CRITICAL Acrobat Reader Dc 1832 records CRITICAL Acrobat 1414 records CRITICAL Experience Manager 1299 records HIGH Acrobat Reader 1085 records CRITICAL Flash Player 1084 records CRITICAL Air 413 records CRITICAL Air Sdk 409 records CRITICAL

Records

15 records in Flex · all components

TI-2007-05757 CVE-2007-6019 · GHSA-9g7g-pmg2-qx9r

Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote…

HIGH 74

Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a modified DeclareFunction2 Actionscript tag, which prevents an object from being…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.5977 Published 2008-04-09 Fixed

TI-2009-00500 CVE-2009-0520 · GHSA-8fmr-hfvg-xqm4

Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly…

MEDIUM 63

Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.28484 Published 2009-02-26 Fixed CWE-119

TI-2009-01781 CVE-2009-1869 · GHSA-6r68-5hx2-xfw5

Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe…

MEDIUM 59

Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (a…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.19698 Published 2009-07-31 Fixed CWE-189

TI-2009-01780 CVE-2009-1868 · GHSA-4qww-9ghh-23c6

Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before…

MEDIUM 59

Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary co…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.21442 Published 2009-07-31 Fixed CWE-119

TI-2009-00499 CVE-2009-0519 · GHSA-x3v4-9m46-pvqg

Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before…

MEDIUM 56

Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a crafted Shockw…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.14764 Published 2009-02-26 Fixed CWE-20

TI-2009-01778 CVE-2009-1866 · GHSA-f74w-j6qg-22r9

Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before…

MEDIUM 50

Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary c…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.07301 Published 2009-07-31 Fixed CWE-119

TI-2009-01776 CVE-2009-1864 · GHSA-c7gf-53j7-h5w5

Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before…

MEDIUM 50

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.07301 Published 2009-07-31 Fixed CWE-119

TI-2009-01777 CVE-2009-1865 · GHSA-q9rx-4j7q-qf5g

Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before…

MEDIUM 49

Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, re…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06033 Published 2009-07-31 Fixed

TI-2009-01775 CVE-2009-1863 · GHSA-m546-wgg7-8mgq

Unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and 10.x before…

MEDIUM 49

Unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary cod…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06033 Published 2009-07-31 Fixed CWE-264

TI-2009-00106 CVE-2009-0114 · GHSA-j6cw-fqgq-9q8c

Unspecified vulnerability in the Settings Manager in Adobe Flash Player 9.x before…

LOW 33

Unspecified vulnerability in the Settings Manager in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87, and possibly other versions, allows remote attackers to trick a user into visiting an arbitrary URL…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.03847 Published 2009-02-26 No fix listed

TI-2008-01587 CVE-2008-1655 · GHSA-6443-g69m-2px6

Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and…

LOW 28

Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04903 Published 2008-04-09 Fixed CWE-79

TI-2009-01779 CVE-2009-1867 · GHSA-r26x-f2vh-qpgr

Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before…

LOW 27

Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a "clickjacking vulnerability.…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0393 Published 2009-07-31 Fixed CWE-59

TI-2009-00502 CVE-2009-0522 · GHSA-qr6w-h8jw-cw4j

Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Windows allows…

LOW 25

Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Windows allows remote attackers to trick a user into visiting an arbitrary URL via an unspecified manipulation of the "mouse pointer display," related…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02701 Published 2009-02-26 No fix listed

TI-2008-02530 CVE-2008-2640 · GHSA-365w-p6xj-xpfw

Multiple cross-site scripting (XSS) vulnerabilities in the Flex 3 History Management…

LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in the Flex 3 History Management feature in Adobe Flex 3.0.1 SDK and Flex Builder 3, and generated applications, allow remote attackers to inject arbitrary web script o…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02774 Published 2008-06-18 No fix listed CWE-79

TI-2009-01782 CVE-2009-1870 · GHSA-qwmj-9j79-8g4m

Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before…

LOW 24

Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to obtain sensitive information via vectors involving saving an SWF file to a hard drive, related to a "local s…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00773 Published 2009-07-31 Fixed CWE-200

Open these records in search →

Critical	1940
High	3102
Medium	2864
Low	140
No CVSS	1