Adobe Security Vulnerabilities (CVEs)

CVE-2024-20752 is a use-after-free vulnerability in Adobe Bridge that could allow arbitrary code execution when a user opens a malicious file. This af...

CVE-2024-20756 is an out-of-bounds write vulnerability in Adobe Bridge that could allow arbitrary code execution when a user opens a malicious file. T...

A heap-based buffer overflow vulnerability in Adobe Premiere Pro allows attackers to execute arbitrary code when a user opens a malicious file. This a...

This CVE describes an Improper Access Control vulnerability in Adobe ColdFusion that allows attackers to read arbitrary files from the file system wit...

A use-after-free vulnerability in Adobe Acrobat Reader allows arbitrary code execution when a user opens a malicious PDF file. This affects users runn...

CVE-2024-20750 is an out-of-bounds read vulnerability in Substance3D Designer that could allow arbitrary code execution when a user opens a malicious ...

This CVE describes an integer overflow vulnerability in Adobe Acrobat Reader that could allow arbitrary code execution when a user opens a malicious P...

This CVE describes an out-of-bounds write vulnerability in Adobe Acrobat Reader that could allow arbitrary code execution when a user opens a maliciou...

CVE-2024-20728 is an out-of-bounds write vulnerability in Adobe Acrobat Reader that could allow arbitrary code execution when a user opens a malicious...

Substance3D Painter versions 9.1.1 and earlier contain an out-of-bounds write vulnerability that could allow arbitrary code execution when a user open...

CVE-2024-20742 is an out-of-bounds read vulnerability in Substance3D Painter that could allow arbitrary code execution when a user opens a malicious f...

CVE-2024-20740 is an out-of-bounds write vulnerability in Adobe Substance3D Painter that could allow arbitrary code execution when a user opens a mali...

A buffer overflow vulnerability in Substance3D Painter versions 9.1.1 and earlier allows attackers to execute arbitrary code by tricking users into op...

This vulnerability allows attackers to execute arbitrary code on affected Adobe Substance 3D Designer installations by tricking users into opening mal...

Adobe After Effects has an improper input validation vulnerability that allows arbitrary code execution when a user opens a malicious file. This affec...

Adobe Substance 3D Sampler versions 4.2.1 and earlier contain an out-of-bounds write vulnerability that allows arbitrary code execution when a user op...

Adobe After Effects has an out-of-bounds write vulnerability that allows attackers to execute arbitrary code when a user opens a malicious file. This ...

This CVE describes an out-of-bounds write vulnerability in Adobe Substance 3D Sampler that could allow arbitrary code execution when a user opens a ma...

Adobe Substance 3D Sampler versions 4.2.1 and earlier contain an out-of-bounds write vulnerability that allows arbitrary code execution when a user op...

Adobe Illustrator versions 28.0 and earlier (and 27.9 and earlier) contain an out-of-bounds read vulnerability when parsing malicious files. This coul...

This vulnerability allows unauthenticated attackers to bypass security controls and access ColdFusion administration endpoints (CFM/CFC files). Adobe ...

An unauthenticated attacker can exploit this XXE vulnerability in Adobe RoboHelp Server to read sensitive files from the server filesystem. This affec...

Adobe RoboHelp Server versions 11.4 and earlier contain an improper input validation vulnerability that allows unauthenticated attackers to access sen...

Adobe After Effects versions 24.0.2 and earlier, and 23.6 and earlier, contain an out-of-bounds write vulnerability that could allow attackers to exec...

Adobe After Effects versions 24.0.2 and earlier, and 23.6 and earlier, contain an out-of-bounds write vulnerability that could allow attackers to exec...

Adobe After Effects versions 24.0.2 and earlier, and 23.6 and earlier, contain an out-of-bounds read vulnerability when parsing malicious files. This ...

Adobe After Effects has an out-of-bounds read vulnerability that could allow arbitrary code execution when a user opens a malicious file. Attackers co...

This heap-based buffer overflow vulnerability in Adobe Premiere Pro allows attackers to execute arbitrary code when a user opens a malicious file. The...

Adobe Premiere Pro versions 24.0 and earlier, and 23.6 and earlier, contain an out-of-bounds read vulnerability when parsing malicious files. An attac...

Adobe InCopy has an out-of-bounds read vulnerability that could allow arbitrary code execution when a user opens a malicious file. Attackers could exp...

Adobe Media Encoder versions 24.0.2 and earlier, and 23.6 and earlier, contain an out-of-bounds read vulnerability when parsing malicious files. An at...

A heap-based buffer overflow vulnerability in Adobe Media Encoder allows attackers to execute arbitrary code when a user opens a malicious file. This ...

This CVE describes an out-of-bounds write vulnerability in Adobe Photoshop that could allow an attacker to execute arbitrary code on a victim's system...

This CVE describes a Use After Free vulnerability in Adobe Acrobat Reader that could allow arbitrary code execution when a user opens a malicious PDF ...

This CVE describes a Use After Free vulnerability in Adobe Acrobat Reader that could allow an attacker to execute arbitrary code on a victim's system....

Adobe Acrobat Reader has an uninitialized pointer vulnerability that allows arbitrary code execution when a user opens a malicious PDF file. This affe...

Adobe Acrobat Reader versions 23.006.20360 and earlier, and 20.005.30524 and earlier, contain a use-after-free vulnerability that could allow arbitrar...

Adobe Acrobat Reader versions 23.006.20360 and earlier, and 20.005.30524 and earlier, contain an out-of-bounds read vulnerability when parsing malicio...

This CVE describes a use-after-free vulnerability in Adobe Acrobat Reader that could allow arbitrary code execution when a user opens a malicious PDF ...

This SQL injection vulnerability in Adobe Commerce allows authenticated attackers with admin privileges to execute arbitrary code on affected systems....

This CVE-2023-38218 vulnerability in Adobe Commerce allows authenticated attackers to bypass authorization controls, potentially exposing sensitive in...

CVE-2023-38220 is an improper authorization vulnerability in Adobe Commerce (formerly Magento) that allows attackers to bypass security controls and a...

CVE-2023-26370 is an access of uninitialized pointer vulnerability in Adobe Photoshop that could allow arbitrary code execution when a user opens a ma...

Saphira Connect versions before 9 have incorrect default permissions that allow local users to escalate privileges. This vulnerability affects all sys...