Adobe Security Vulnerabilities (CVEs)

Adobe Framemaker versions 2020.6, 2022.4 and earlier contain an unrestricted file upload vulnerability (CWE-434) that could allow arbitrary code execu...

Adobe Framemaker versions 2020.6, 2022.4 and earlier contain an integer underflow vulnerability that could allow arbitrary code execution when a user ...

CVE-2024-45136 is an unrestricted file upload vulnerability in Adobe InCopy that allows attackers to upload malicious files which could lead to arbitr...

Adobe Framemaker has an out-of-bounds read vulnerability when parsing malicious files, which could allow attackers to execute arbitrary code as the cu...

CVE-2024-45152 is an out-of-bounds write vulnerability in Substance3D Stager that allows arbitrary code execution when a user opens a malicious file. ...

CVE-2024-45141 is an out-of-bounds write vulnerability in Substance3D Stager that could allow arbitrary code execution when a user opens a malicious f...

CVE-2024-45143 is a heap-based buffer overflow vulnerability in Adobe Substance3D Stager that could allow arbitrary code execution when a user opens a...

CVE-2024-45139 is a heap-based buffer overflow vulnerability in Adobe Substance3D Stager that allows arbitrary code execution when a user opens a mali...

CVE-2024-47418 is a use-after-free vulnerability in Adobe Animate that could allow arbitrary code execution when a user opens a malicious file. This a...

Adobe Animate versions 23.0.7, 24.0.4 and earlier contain an out-of-bounds read vulnerability that could allow attackers to read sensitive memory cont...

Adobe Animate versions 23.0.7, 24.0.4 and earlier contain a use-after-free vulnerability that could allow arbitrary code execution when a user opens a...

Adobe Animate versions 23.0.7, 24.0.4 and earlier contain a use-after-free vulnerability that could allow an attacker to execute arbitrary code on a v...

Adobe Animate versions 23.0.7, 24.0.4 and earlier contain an integer overflow vulnerability that could allow arbitrary code execution when a user open...

A stack-based buffer overflow vulnerability in Adobe Animate allows arbitrary code execution when a user opens a malicious file. This affects users of...

Lightroom Desktop has an out-of-bounds read vulnerability that could allow attackers to read sensitive memory contents when users open malicious files...

CVE-2024-20787 is an out-of-bounds read vulnerability in Substance3D Painter that could allow an attacker to read sensitive memory contents when a use...

Adobe Dimension versions 4.0.3 and earlier contain a use-after-free vulnerability that could allow an attacker to execute arbitrary code on a victim's...

This CVE describes an improper authentication vulnerability in Adobe ColdFusion that allows attackers to bypass authentication mechanisms and escalate...

This CVE describes an out-of-bounds write vulnerability in Adobe Photoshop that could allow an attacker to execute arbitrary code on a victim's system...

CVE-2024-43756 is a heap-based buffer overflow vulnerability in Adobe Photoshop that could allow arbitrary code execution when a user opens a maliciou...

This CVE describes a Type Confusion vulnerability in Adobe Acrobat Reader that could allow arbitrary code execution when a user opens a malicious PDF ...

Adobe Illustrator versions 28.6, 27.9.5 and earlier contain a NULL pointer dereference vulnerability that allows attackers to crash the application by...

CVE-2024-41869 is a use-after-free vulnerability in Adobe Acrobat Reader that could allow arbitrary code execution when a user opens a malicious PDF f...

CVE-2024-41867 is an out-of-bounds read vulnerability in Adobe After Effects that could allow an attacker to read sensitive memory contents. This coul...

Adobe Illustrator versions 28.6, 27.9.5 and earlier contain an integer underflow vulnerability that could allow arbitrary code execution when a user o...

CVE-2024-39384 is an out-of-bounds write vulnerability in Adobe Premiere Pro that could allow arbitrary code execution when a user opens a malicious f...

CVE-2024-39381 is an out-of-bounds write vulnerability in Adobe After Effects that could allow arbitrary code execution when a user opens a malicious ...

Adobe Illustrator versions 28.6, 27.9.5 and earlier contain an integer overflow vulnerability that could allow arbitrary code execution when a user op...

Adobe Media Encoder versions 24.5, 23.6.8 and earlier contain an out-of-bounds read vulnerability that could allow attackers to read sensitive memory ...

Adobe Media Encoder versions 24.5, 23.6.8 and earlier contain an out-of-bounds read vulnerability that could allow attackers to read sensitive memory ...

Adobe Media Encoder versions 24.5, 23.6.8 and earlier contain an out-of-bounds write vulnerability that could allow attackers to execute arbitrary cod...

Adobe Audition versions 24.4.1, 23.6.6 and earlier contain an out-of-bounds read vulnerability that could allow attackers to read sensitive memory con...

CVE-2024-45107 is a use-after-free vulnerability in Adobe Acrobat Reader that could allow an attacker to read sensitive memory contents and bypass ASL...

CVE-2024-41879 is an out-of-bounds write vulnerability in Adobe Acrobat Reader that could allow arbitrary code execution when a user opens a malicious...

Adobe Experience Manager versions 6.5.19 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability where attackers can inject malicious sc...

This stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager allows attackers to inject malicious JavaScript into vulnerable form ...

This CVE describes a reflected Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager versions 6.5.20 and earlier. An attacker can craft...

This CVE describes a stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) versions 6.5.20 and earlier. It allows attacker...

This stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager allows attackers to inject malicious JavaScript into vulnerable form ...

Adobe Experience Manager versions 6.5.20 and earlier contain a stored XSS vulnerability where attackers can inject malicious JavaScript into form fiel...

Adobe InDesign has a NULL pointer dereference vulnerability that allows attackers to crash the application by tricking users into opening malicious fi...

CVE-2024-41853 is a heap-based buffer overflow vulnerability in Adobe InDesign that could allow arbitrary code execution when a user opens a malicious...

Adobe Illustrator versions 28.5, 27.9.4, 28.6, 27.9.5 and earlier contain an improper input validation vulnerability that could allow arbitrary code e...

This CVE describes an out-of-bounds read vulnerability in Adobe Acrobat Reader that could allow an attacker to read sensitive memory contents. When ex...

Adobe Bridge versions 13.0.8, 14.1.1 and earlier contain an out-of-bounds write vulnerability that could allow arbitrary code execution when a user op...

This CVE describes an integer overflow vulnerability in Adobe InDesign that could allow arbitrary code execution when a user opens a malicious file. A...

CVE-2024-41831 is a use-after-free vulnerability in Adobe Acrobat Reader that could allow attackers to execute arbitrary code when a user opens a mali...

This CVE describes an out-of-bounds read vulnerability in Adobe Acrobat Reader that could allow an attacker to read sensitive memory contents, potenti...

This CVE describes an out-of-bounds write vulnerability in Adobe Acrobat Reader that could allow arbitrary code execution when a user opens a maliciou...