Adobe: exploited vulnerabilities
- 82exploited vulnerabilities
- 11used by ransomware
- Sep 24, 2026latest one added
- Flash Player 33
- ColdFusion 16
- Acrobat and Reader 13
- Reader and Acrobat 8
- Commerce and Magento Open Source 2
- Flash Player and AIR 2
- Commerce and Magento 1
- Commerce and Magento 1
- Acrobat 1
- Commerce and Magento 1
- Experience Manager (AEM) Forms 1
- Acrobat and Reader, Flash Player 1
- BlazeDS 1
- Reader 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Sep 24, 2026 | Commerce and Magento Incorrect Authorization Vulnerability | Commerce and Magento | Critical 9.1 | 90% |
| Sep 8, 2026 | Improper Neutralization of Special Elements Used in a Template Engine | Commerce and Magento | Critical 10.0 | 3.9% |
| Jul 7, 2026 | Path Traversal | ColdFusion | Critical 10.0 | 42% |
| May 20, 2026 | Heap-Based Buffer Overflow | Acrobat and Reader | High 8.8 | 87% |
| Apr 13, 2026 | Prototype Pollution | Acrobat and Reader | High 8.6 | 7.2% |
| Apr 13, 2026 | Use-After-Free | Acrobat | High 7.8 | 33% |
| Oct 24, 2025 | Improper Input Validation | Commerce and Magento | Critical 9.1 | 95% |
| Oct 15, 2025 | Experience Manager Forms Code Execution | Experience Manager (AEM) Forms | Critical 10.0 | 89% |
| Feb 24, 2025 | Deserialization | ColdFusion | Critical 9.8 | 91% |
| Dec 16, 2024 | Improper Access Control | ColdFusion | High 7.4 | 99% |
| Sep 17, 2024 | Double Free Vulnerablity | Flash Player | High 8.8 | 25% |
| Sep 17, 2024 | Integer Underflow Vulnerablity | Flash Player | High 8.8 | 99.9% |
| Sep 17, 2024 | Code Execution | Flash Player | High 8.8 | 11% |
| Sep 17, 2024 | Incorrect Default Permissions | Flash Player | High 8.8 | 11% |
| Jul 17, 2024 | Improper Restriction of XML External Entity Reference (XXE) | Commerce and Magento Open Source | Critical 9.8 | >99.9% |
| Jan 8, 2024 | Deserialization of Untrusted Data | ColdFusion | Critical 9.8 | 97% |
| Jan 8, 2024 | Deserialization of Untrusted Data | ColdFusion | Critical 9.8 | >99.9% |
| Oct 10, 2023 | Use-After-Free | Acrobat and Reader | High 7.8 | 59% |
| Sep 14, 2023 | Out-of-Bounds Write | Acrobat and Reader | High 7.8 | 6.7% |
| Aug 21, 2023 | Deserialization of Untrusted Data | ColdFusion | Critical 9.8 | 17% |
| Jul 20, 2023 | Improper Access Control | ColdFusion | High 7.5 | 99.8% |
| Jul 20, 2023 | Improper Access Control | ColdFusion | High 7.5 | 99.8% |
| Mar 15, 2023 | Deserialization of Untrusted Data | ColdFusion | High 8.6 | 97% |
| Jun 8, 2022 | Double Free | Acrobat and Reader | High 8.8 | 36% |
| Jun 8, 2022 | Integer Overflow | Flash Player | High 8.8 | 21% |
| Jun 8, 2022 | Cross-Site Scripting (XSS) | Flash Player | Medium 6.1 | 6.2% |
| Jun 8, 2022 | Memory Corruption | Flash Player | High 7.8 | 91% |
| Jun 8, 2022 | Universal 3D Memory Corruption | Reader and Acrobat | High 8.8 | 89% |
| Jun 8, 2022 | Unspecified | Flash Player | High 7.8 | 64% |
| Jun 8, 2022 | Stack-Based Buffer Overflow | Acrobat and Reader | High 7.3 | 81% |
| Jun 8, 2022 | Memory Corruption | Flash Player | High 7.8 | 83% |
| Jun 8, 2022 | Use-After-Free | Acrobat and Reader | High 7.8 | 82% |
| Jun 8, 2022 | Universal 3D Remote Code Execution | Acrobat and Reader | High 8.8 | 83% |
| Jun 8, 2022 | Unspecified | Acrobat and Reader, Flash Player | High 7.8 | 21% |
| Jun 8, 2022 | Unspecified | Acrobat and Reader | High 8.8 | 38% |
| Jun 8, 2022 | Buffer Overflow | Acrobat and Reader | High 7.8 | 87% |
| May 25, 2022 | Integer Overflow | Flash Player and AIR | High 8.8 | 19% |
| May 25, 2022 | Use-After-Free | Flash Player and AIR | High 8.8 | 55% |
| May 25, 2022 | Integer Overflow | Flash Player | High 8.8 | 68% |
| May 25, 2022 | ASLR Bypass | Flash Player | High 7.8 | 15% |
| May 25, 2022 | Dereferenced Pointer | Flash Player | High 8.8 | 20% |
| May 25, 2022 | Sandbox Bypass | Reader and Acrobat | High 8.8 | 22% |
| May 23, 2022 | Stack-based Buffer Overflow | Flash Player | High 7.8 | 25% |
| Apr 13, 2022 | Use-After-Free | Flash Player | High 7.8 | 19% |
| Apr 13, 2022 | Use-After-Free | Flash Player | High 7.8 | 87% |
| Apr 13, 2022 | Heap-Based Buffer Overflow | Flash Player | High 7.8 | 99.8% |
| Apr 13, 2022 | Use-After-Free | Flash Player | High 7.8 | 95% |
| Apr 13, 2022 | Remote Code Execution | Flash Player | High 7.8 | 86% |
| Apr 13, 2022 | Stack-Based Buffer Overflow | Flash Player | High 7.8 | 45% |
| Mar 28, 2022 | Arbitrary Integer Overflow | Reader and Acrobat | High 8.8 | 67% |
| Mar 28, 2022 | Memory Corruption | Flash Player | High 7.5 | 7.7% |
| Mar 25, 2022 | Use-After-Free | Flash Player | High 8.8 | 19% |
| Mar 25, 2022 | Remote Code Execution | Flash Player | High 7.8 | 20% |
| Mar 25, 2022 | Directory Traversal | ColdFusion | High 7.5 | 99.7% |
| Mar 25, 2022 | Reader and Adobe Acrobat Stack-Based Buffer Overflow | Reader and Acrobat | High 8.8 | 97% |
| Mar 7, 2022 | Information Disclosure | ColdFusion | High 7.5 | 66% |
| Mar 7, 2022 | Directory Traversal | ColdFusion | High 7.5 | 66% |
| Mar 7, 2022 | Authentication Bypass | ColdFusion | Critical 9.8 | 94% |
| Mar 7, 2022 | Information Disclosure | BlazeDS | Medium 6.5 | 90% |
| Mar 3, 2022 | Type Confusion | Flash Player | High 8.8 | 12% |
| Mar 3, 2022 | Use-After-Free | Flash Player | High 8.8 | 25% |
| Mar 3, 2022 | Arbitrary Code Execution | Flash Player | High 7.8 | 94% |
| Mar 3, 2022 | Arbitrary Code Execution | Flash Player | High 7.8 | 22% |
| Mar 3, 2022 | Arbitrary Code Execution | Flash Player | High 7.8 | 65% |
| Mar 3, 2022 | Use-After-Free | Flash Player | High 7.8 | 99% |
| Mar 3, 2022 | Memory Corruption | Flash Player | High 7.8 | 74% |
| Mar 3, 2022 | Use-After-Free | Reader and Acrobat | High 8.8 | 40% |
| Mar 3, 2022 | Memory Corruption | Reader and Acrobat | High 8.8 | 79% |
| Mar 3, 2022 | Buffer Overflow | Reader | High 7.8 | 32% |
| Mar 3, 2022 | Memory Corruption | Reader and Acrobat | High 7.8 | 87% |
| Mar 3, 2022 | Authentication Bypass | ColdFusion | Critical 9.8 | 93% |
| Mar 3, 2022 | Arbitrary Code Execution | Flash Player | High 7.8 | 70% |
| Mar 3, 2022 | Remote Code Execution | Flash Player | High 8.8 | 99.4% |
| Mar 3, 2022 | Arbitrary Code Execution | Reader and Acrobat | High 7.8 | 88% |
| Mar 3, 2022 | Reader and Acrobat Input Validation | Acrobat and Reader | High 7.8 | 99.8% |
| Feb 15, 2022 | Improper Input Validation | Commerce and Magento Open Source | Critical 9.8 | 99.2% |
| Feb 15, 2022 | Use-After-Free | Flash Player | High 7.8 | 90% |
| Nov 3, 2021 | Use-After-Free | Acrobat and Reader | Critical 9.6 | 52% |
| Nov 3, 2021 | Heap-based Buffer Overflow | Acrobat and Reader | High 8.8 | 86% |
| Nov 3, 2021 | Deserialization of Untrusted Data | ColdFusion | Critical 9.8 | 62% |
| Nov 3, 2021 | Use-After-Free | Flash Player | High 7.8 | 90% |
| Nov 3, 2021 | Unrestricted File Upload | ColdFusion | Critical 9.8 | >99.9% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.