Adobe: vulnerabilidades explotadas
- 82vulnerabilidades explotadas
- 11usado por ransomware
- 24 sept 2026la última añadida
- Flash Player 33
- ColdFusion 16
- Acrobat and Reader 13
- Reader and Acrobat 8
- Commerce and Magento Open Source 2
- Flash Player and AIR 2
- Commerce and Magento 1
- Commerce and Magento 1
- Acrobat 1
- Commerce and Magento 1
- Experience Manager (AEM) Forms 1
- Acrobat and Reader, Flash Player 1
- BlazeDS 1
- Reader 1
| Añadido | Vulnerabilidad | Producto | Gravedad | Prob. de ataque |
|---|---|---|---|---|
| 24 sept 2026 | Commerce and Magento Incorrect Authorization Vulnerability | Commerce and Magento | Crítica 9,1 | 90% |
| 8 sept 2026 | Improper Neutralization of Special Elements Used in a Template Engine | Commerce and Magento | Crítica 10,0 | 3,9% |
| 7 jul 2026 | Path Traversal | ColdFusion | Crítica 10,0 | 42% |
| 20 may 2026 | Heap-Based Buffer Overflow | Acrobat and Reader | Alto 8,8 | 87% |
| 13 abr 2026 | Prototype Pollution | Acrobat and Reader | Alto 8,6 | 7,2% |
| 13 abr 2026 | Use-After-Free | Acrobat | Alto 7,8 | 33% |
| 24 oct 2025 | Improper Input Validation | Commerce and Magento | Crítica 9,1 | 95% |
| 15 oct 2025 | Experience Manager Forms Code Execution | Experience Manager (AEM) Forms | Crítica 10,0 | 89% |
| 24 feb 2025 | Deserialization | ColdFusion | Crítica 9,8 | 91% |
| 16 dic 2024 | Improper Access Control | ColdFusion | Alto 7,4 | 99% |
| 17 sept 2024 | Double Free Vulnerablity | Flash Player | Alto 8,8 | 25% |
| 17 sept 2024 | Integer Underflow Vulnerablity | Flash Player | Alto 8,8 | 99,9% |
| 17 sept 2024 | Code Execution | Flash Player | Alto 8,8 | 11% |
| 17 sept 2024 | Incorrect Default Permissions | Flash Player | Alto 8,8 | 11% |
| 17 jul 2024 | Improper Restriction of XML External Entity Reference (XXE) | Commerce and Magento Open Source | Crítica 9,8 | >99,9% |
| 8 ene 2024 | Deserialization of Untrusted Data | ColdFusion | Crítica 9,8 | 97% |
| 8 ene 2024 | Deserialization of Untrusted Data | ColdFusion | Crítica 9,8 | >99,9% |
| 10 oct 2023 | Use-After-Free | Acrobat and Reader | Alto 7,8 | 59% |
| 14 sept 2023 | Out-of-Bounds Write | Acrobat and Reader | Alto 7,8 | 6,7% |
| 21 ago 2023 | Deserialization of Untrusted Data | ColdFusion | Crítica 9,8 | 17% |
| 20 jul 2023 | Improper Access Control | ColdFusion | Alto 7,5 | 99,8% |
| 20 jul 2023 | Improper Access Control | ColdFusion | Alto 7,5 | 99,8% |
| 15 mar 2023 | Deserialization of Untrusted Data | ColdFusion | Alto 8,6 | 97% |
| 8 jun 2022 | Double Free | Acrobat and Reader | Alto 8,8 | 36% |
| 8 jun 2022 | Integer Overflow | Flash Player | Alto 8,8 | 21% |
| 8 jun 2022 | Cross-Site Scripting (XSS) | Flash Player | Media 6,1 | 6,2% |
| 8 jun 2022 | Memory Corruption | Flash Player | Alto 7,8 | 91% |
| 8 jun 2022 | Universal 3D Memory Corruption | Reader and Acrobat | Alto 8,8 | 89% |
| 8 jun 2022 | Unspecified | Flash Player | Alto 7,8 | 64% |
| 8 jun 2022 | Stack-Based Buffer Overflow | Acrobat and Reader | Alto 7,3 | 81% |
| 8 jun 2022 | Memory Corruption | Flash Player | Alto 7,8 | 83% |
| 8 jun 2022 | Use-After-Free | Acrobat and Reader | Alto 7,8 | 82% |
| 8 jun 2022 | Universal 3D Remote Code Execution | Acrobat and Reader | Alto 8,8 | 83% |
| 8 jun 2022 | Unspecified | Acrobat and Reader, Flash Player | Alto 7,8 | 21% |
| 8 jun 2022 | Unspecified | Acrobat and Reader | Alto 8,8 | 38% |
| 8 jun 2022 | Buffer Overflow | Acrobat and Reader | Alto 7,8 | 87% |
| 25 may 2022 | Integer Overflow | Flash Player and AIR | Alto 8,8 | 19% |
| 25 may 2022 | Use-After-Free | Flash Player and AIR | Alto 8,8 | 55% |
| 25 may 2022 | Integer Overflow | Flash Player | Alto 8,8 | 68% |
| 25 may 2022 | ASLR Bypass | Flash Player | Alto 7,8 | 15% |
| 25 may 2022 | Dereferenced Pointer | Flash Player | Alto 8,8 | 20% |
| 25 may 2022 | Sandbox Bypass | Reader and Acrobat | Alto 8,8 | 22% |
| 23 may 2022 | Stack-based Buffer Overflow | Flash Player | Alto 7,8 | 25% |
| 13 abr 2022 | Use-After-Free | Flash Player | Alto 7,8 | 19% |
| 13 abr 2022 | Use-After-Free | Flash Player | Alto 7,8 | 87% |
| 13 abr 2022 | Heap-Based Buffer Overflow | Flash Player | Alto 7,8 | 99,8% |
| 13 abr 2022 | Use-After-Free | Flash Player | Alto 7,8 | 95% |
| 13 abr 2022 | Remote Code Execution | Flash Player | Alto 7,8 | 86% |
| 13 abr 2022 | Stack-Based Buffer Overflow | Flash Player | Alto 7,8 | 45% |
| 28 mar 2022 | Arbitrary Integer Overflow | Reader and Acrobat | Alto 8,8 | 67% |
| 28 mar 2022 | Memory Corruption | Flash Player | Alto 7,5 | 7,7% |
| 25 mar 2022 | Use-After-Free | Flash Player | Alto 8,8 | 19% |
| 25 mar 2022 | Remote Code Execution | Flash Player | Alto 7,8 | 20% |
| 25 mar 2022 | Directory Traversal | ColdFusion | Alto 7,5 | 99,7% |
| 25 mar 2022 | Reader and Adobe Acrobat Stack-Based Buffer Overflow | Reader and Acrobat | Alto 8,8 | 97% |
| 7 mar 2022 | Information Disclosure | ColdFusion | Alto 7,5 | 66% |
| 7 mar 2022 | Directory Traversal | ColdFusion | Alto 7,5 | 66% |
| 7 mar 2022 | Authentication Bypass | ColdFusion | Crítica 9,8 | 94% |
| 7 mar 2022 | Information Disclosure | BlazeDS | Media 6,5 | 90% |
| 3 mar 2022 | Type Confusion | Flash Player | Alto 8,8 | 12% |
| 3 mar 2022 | Use-After-Free | Flash Player | Alto 8,8 | 25% |
| 3 mar 2022 | Arbitrary Code Execution | Flash Player | Alto 7,8 | 94% |
| 3 mar 2022 | Arbitrary Code Execution | Flash Player | Alto 7,8 | 22% |
| 3 mar 2022 | Arbitrary Code Execution | Flash Player | Alto 7,8 | 65% |
| 3 mar 2022 | Use-After-Free | Flash Player | Alto 7,8 | 99% |
| 3 mar 2022 | Memory Corruption | Flash Player | Alto 7,8 | 74% |
| 3 mar 2022 | Use-After-Free | Reader and Acrobat | Alto 8,8 | 40% |
| 3 mar 2022 | Memory Corruption | Reader and Acrobat | Alto 8,8 | 79% |
| 3 mar 2022 | Buffer Overflow | Reader | Alto 7,8 | 32% |
| 3 mar 2022 | Memory Corruption | Reader and Acrobat | Alto 7,8 | 87% |
| 3 mar 2022 | Authentication Bypass | ColdFusion | Crítica 9,8 | 93% |
| 3 mar 2022 | Arbitrary Code Execution | Flash Player | Alto 7,8 | 70% |
| 3 mar 2022 | Remote Code Execution | Flash Player | Alto 8,8 | 99,4% |
| 3 mar 2022 | Arbitrary Code Execution | Reader and Acrobat | Alto 7,8 | 88% |
| 3 mar 2022 | Reader and Acrobat Input Validation | Acrobat and Reader | Alto 7,8 | 99,8% |
| 15 feb 2022 | Improper Input Validation | Commerce and Magento Open Source | Crítica 9,8 | 99,2% |
| 15 feb 2022 | Use-After-Free | Flash Player | Alto 7,8 | 90% |
| 3 nov 2021 | Use-After-Free | Acrobat and Reader | Crítica 9,6 | 52% |
| 3 nov 2021 | Heap-based Buffer Overflow | Acrobat and Reader | Alto 8,8 | 86% |
| 3 nov 2021 | Deserialization of Untrusted Data | ColdFusion | Crítica 9,8 | 62% |
| 3 nov 2021 | Use-After-Free | Flash Player | Alto 7,8 | 90% |
| 3 nov 2021 | Unrestricted File Upload | ColdFusion | Crítica 9,8 | >99,9% |
Fuentes: Known Exploited Vulnerabilities (CISA, dominio público), CVE records (cve.org) y EPSS (FIRST). La probabilidad de ataque es la estimación EPSS de que alguien intente explotar el fallo en los próximos 30 días.