Adobe Security Vulnerabilities (CVEs)

Adobe Framemaker versions 2020.8, 2022.6 and earlier contain a heap-based buffer overflow vulnerability that allows arbitrary code execution when a us...

Adobe Framemaker versions 2020.8, 2022.6 and earlier contain a NULL pointer dereference vulnerability that allows attackers to cause denial-of-service...

Adobe Framemaker versions 2020.8, 2022.6 and earlier contain an out-of-bounds read vulnerability that could allow attackers to read sensitive memory c...

Adobe Framemaker versions 2020.8, 2022.6 and earlier contain an out-of-bounds write vulnerability that could allow arbitrary code execution when a use...

Adobe Framemaker versions 2020.8, 2022.6 and earlier contain a heap-based buffer overflow vulnerability that could allow attackers to execute arbitrar...

Adobe Framemaker versions 2020.8, 2022.6 and earlier contain an out-of-bounds write vulnerability that could allow attackers to execute arbitrary code...

Adobe Experience Manager Screens versions FP11.3 and earlier contain a stored cross-site scripting vulnerability that allows low-privileged attackers ...

CVE-2025-27195 is a heap-based buffer overflow vulnerability in Adobe Media Encoder that could allow arbitrary code execution when a user opens a mali...

A heap-based buffer overflow vulnerability in Adobe Photoshop allows attackers to execute arbitrary code when a user opens a malicious file. This affe...

Adobe Animate versions 24.0.7, 23.0.10 and earlier contain a use-after-free vulnerability that could allow arbitrary code execution when a user opens ...

Adobe Animate versions 24.0.7, 23.0.10 and earlier contain an out-of-bounds read vulnerability that could allow attackers to read sensitive memory con...

CVE-2025-27184 is an out-of-bounds read vulnerability in Adobe After Effects that could allow an attacker to read sensitive memory contents. This coul...

Adobe After Effects versions 25.1, 24.6.4 and earlier contain an out-of-bounds read vulnerability that could allow attackers to read sensitive memory ...

CVE-2025-27193 is a heap-based buffer overflow vulnerability in Adobe Bridge that could allow arbitrary code execution when a user opens a malicious f...

CVE-2025-27182 is an out-of-bounds write vulnerability in Adobe After Effects that could allow arbitrary code execution when a user opens a malicious ...

Adobe Experience Manager versions 6.5.21 and earlier contain a DOM-based cross-site scripting vulnerability that allows low-privileged attackers to ex...

This DOM-based Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager allows attackers to inject malicious scripts that execute in victi...

Substance3D Modeler versions 1.15.0 and earlier contain a NULL pointer dereference vulnerability that allows attackers to crash the application by tri...

CVE-2025-27173 is a heap-based buffer overflow vulnerability in Substance3D Modeler that allows arbitrary code execution when a user opens a malicious...

CVE-2025-27180 is an out-of-bounds read vulnerability in Substance3D Modeler that could allow an attacker to read sensitive memory contents when a vic...

CVE-2025-27181 is a use-after-free vulnerability in Substance3D Modeler that could allow arbitrary code execution when a user opens a malicious file. ...

CVE-2025-27172 is an out-of-bounds write vulnerability in Substance3D Designer that could allow arbitrary code execution when a user opens a malicious...

CVE-2025-21169 is a heap-based buffer overflow vulnerability in Substance3D Designer that could allow arbitrary code execution when a user opens a mal...

Adobe Commerce has an incorrect authorization vulnerability that allows low-privileged attackers to bypass security features and view select informati...

A stored Cross-Site Scripting (XSS) vulnerability in Adobe Commerce allows low-privileged attackers to inject malicious JavaScript into vulnerable for...

CVE-2025-24427 is an improper access control vulnerability in Adobe Commerce that allows low-privileged attackers to bypass security measures and gain...

Adobe Commerce has an incorrect authorization vulnerability that allows low-privileged attackers to bypass security features and read select data with...

Adobe Commerce has an improper access control vulnerability (CWE-284) that allows low-privileged attackers to escalate privileges and modify select da...

This CVE describes a business logic error in Adobe Commerce that allows attackers to bypass security features and modify limited data without user int...

A stored Cross-Site Scripting (XSS) vulnerability in Adobe Commerce allows low-privileged attackers to inject malicious JavaScript into vulnerable for...

A stored Cross-Site Scripting (XSS) vulnerability in Adobe Commerce allows low-privileged attackers to inject malicious scripts into form fields. When...

CVE-2025-24418 is an improper authorization vulnerability in Adobe Commerce that allows low-privileged attackers to bypass security controls and escal...

CVE-2025-24419 is an incorrect authorization vulnerability in Adobe Commerce that allows low-privileged attackers to bypass security features and modi...

A stored Cross-Site Scripting (XSS) vulnerability in Adobe Commerce allows low-privileged attackers to inject malicious JavaScript into vulnerable for...

Adobe Commerce has an improper access control vulnerability that allows low-privileged attackers to bypass security measures and gain unauthorized acc...

A stored Cross-Site Scripting (XSS) vulnerability in Adobe Commerce allows low-privileged attackers to inject malicious JavaScript into vulnerable for...

A stored cross-site scripting (XSS) vulnerability in Adobe Commerce allows low-privileged attackers to inject malicious scripts into vulnerable form f...

A stored Cross-Site Scripting (XSS) vulnerability in Adobe Commerce allows low-privileged attackers to inject malicious JavaScript into vulnerable for...

A stored Cross-Site Scripting (XSS) vulnerability in Adobe Commerce allows low-privileged attackers to inject malicious JavaScript into vulnerable for...

This CVE describes a path traversal vulnerability in Adobe Commerce that allows unauthenticated attackers to modify files outside restricted directori...

Adobe Commerce has an incorrect authorization vulnerability (CWE-863) that allows low-privileged attackers to bypass security features and perform una...

Adobe Commerce has an information exposure vulnerability that allows low-privileged attackers to access sensitive data without user interaction. This ...

This CVE describes an incorrect authorization vulnerability in Adobe Commerce that allows attackers to bypass security measures and gain unauthorized ...

Adobe Illustrator versions 29.1, 28.7.3 and earlier contain an integer underflow vulnerability that could allow arbitrary code execution when a user o...

CVE-2025-21161 is an out-of-bounds write vulnerability in Substance3D Designer that could allow arbitrary code execution when a user opens a malicious...

Photoshop Elements 2025.0 and earlier versions contain a vulnerability where temporary files are created with insecure permissions, allowing local pri...

A stack-based buffer overflow vulnerability in Adobe Illustrator allows attackers to execute arbitrary code when a user opens a malicious file. This a...

An integer underflow vulnerability in Adobe InCopy allows arbitrary code execution when a user opens a malicious file. This affects users of InCopy ve...

Adobe Illustrator versions 29.1, 28.7.3 and earlier contain a use-after-free vulnerability that could allow attackers to execute arbitrary code when a...