Adobe Security Vulnerabilities (CVEs)

This vulnerability allows attackers to execute arbitrary code on systems running vulnerable versions of Adobe Bridge by tricking users into opening a ...

CVE-2021-42721 is a use-after-free vulnerability in Adobe Bridge versions 11.1.1 and earlier that allows arbitrary code execution when processing mali...

Adobe Bridge versions 11.1.1 and earlier contain a memory corruption vulnerability when processing malicious M4A files. This could allow attackers to ...

This vulnerability allows arbitrary code execution when a user opens a malicious JPEG2000 file in vulnerable Adobe Acrobat Reader versions. Attackers ...

A path traversal vulnerability in Adobe Acrobat Reader for Android allows attackers to execute arbitrary code by tricking users into opening malicious...

This CVE describes a use-after-free vulnerability in Adobe Acrobat Reader DC that could allow arbitrary code execution when processing a malicious Acr...

A buffer overflow vulnerability in Adobe Acrobat Reader DC allows arbitrary code execution when a user opens a malicious PDF file. Attackers can explo...

This vulnerability in Adobe Genuine Service allows authenticated attackers to escalate privileges through the AGSService installer. Attackers can gain...

This vulnerability allows attackers to execute arbitrary code on systems running vulnerable versions of Adobe Premiere Pro by tricking users into open...

This CVE describes a use-after-free vulnerability in Adobe Acrobat Reader DC that could allow arbitrary code execution when a user opens a malicious P...

This CVE describes an out-of-bounds write vulnerability in Adobe Framemaker that allows arbitrary code execution when a user opens a malicious PDF fil...

This CVE describes an out-of-bounds write vulnerability in Adobe Framemaker that allows arbitrary code execution when a user opens a malicious PDF fil...

This CVE describes a use-after-free vulnerability in Adobe Acrobat Reader DC's AcroForm buttonGetIcon action processing. When exploited, it allows arb...

This CVE describes a use-after-free vulnerability in Adobe Acrobat Reader DC's AcroForm buttonGetCaption action. If exploited, it allows arbitrary cod...

This CVE describes a use-after-free vulnerability in Adobe Acrobat Reader DC's AcroForms processing that could allow arbitrary code execution when a u...

This CVE describes a DLL hijacking vulnerability in Adobe Acrobat Reader DC where a local attacker with non-administrative privileges can plant a mali...

This vulnerability in Adobe Photoshop Elements allows attackers to execute arbitrary code on a victim's computer by tricking them into opening a malic...

This vulnerability in Adobe Premiere Elements allows attackers to execute arbitrary code on a user's system by tricking them into opening a malicious ...

Adobe Premiere Elements versions 2021.2235820 and earlier contain a memory corruption vulnerability when processing malicious PSD files. This could al...

A buffer overflow vulnerability in Adobe Photoshop allows arbitrary code execution when parsing malicious SVG files. Attackers can exploit this by tri...

This vulnerability in Adobe Creative Cloud Desktop Application allows an attacker with local access, administrator privileges, and user interaction to...

Adobe InCopy versions 11.1 and earlier contain a memory corruption vulnerability when processing malicious TIFF files. This could allow attackers to e...

This vulnerability in Adobe SVG Native Viewer allows attackers to execute arbitrary code by tricking users into opening a malicious SVG file. It affec...

CVE-2021-28571 is a command injection vulnerability in Adobe After Effects that allows arbitrary code execution when chained with JavaScript debugging...

CVE-2021-21104 is a memory corruption vulnerability in Adobe Illustrator that allows remote code execution when a user opens a malicious file. Attacke...

CVE-2021-28580 is a buffer overflow vulnerability in Adobe Medium versions 2.4.5.331 and earlier that allows remote code execution when a user opens a...

Adobe After Effects versions 18.2.1 and earlier contain an out-of-bounds write vulnerability when parsing malicious files. An attacker can achieve arb...

Adobe After Effects versions 18.2.1 and earlier contain a memory corruption vulnerability when parsing malicious files. An attacker can achieve arbitr...

CVE-2021-28550 is a use-after-free vulnerability in Adobe Acrobat Reader DC that allows arbitrary code execution when a user opens a malicious PDF fil...

This CVE describes a heap-based buffer overflow vulnerability in Adobe Acrobat Reader DC's PDFLibTool component. An unauthenticated attacker can execu...

This heap-based buffer overflow vulnerability in Adobe Acrobat Reader DC allows an unauthenticated attacker to execute arbitrary code on a victim's sy...

This CVE describes an out-of-bounds write vulnerability in Adobe Acrobat Reader DC's ImageTool component. An unauthenticated attacker can achieve arbi...

CVE-2021-21086 is an out-of-bounds write vulnerability in Adobe Acrobat Reader DC's CoolType library that allows arbitrary code execution when a user ...

CVE-2021-36075 is a buffer overflow vulnerability in Adobe Bridge that allows arbitrary code execution when a user opens a malicious Bridge file. Atta...

CVE-2021-36078 is a memory corruption vulnerability in Adobe Bridge that allows arbitrary code execution when a user opens a malicious Bridge file. At...

Adobe Bridge versions 11.1 and earlier contain a memory corruption vulnerability when processing malicious Bridge files. This could allow attackers to...

CVE-2021-39847 is a stack-based buffer overflow vulnerability in Adobe XMP Toolkit SDK versions 2020.1 and earlier. It allows arbitrary code execution...

CVE-2021-36059 is a memory corruption vulnerability in Adobe Bridge that allows arbitrary code execution when a user opens a malicious Bridge file. At...

CVE-2021-36064 is a buffer underflow vulnerability in Adobe XMP Toolkit that could allow arbitrary code execution when a user opens a malicious file. ...

This CVE describes an out-of-bounds write vulnerability in Adobe Photoshop that could allow an attacker to execute arbitrary code on a victim's system...

CVE-2021-36068 is a memory corruption vulnerability in Adobe Bridge that allows arbitrary code execution when a user opens a malicious Bridge file. At...

CVE-2021-36070 is an improper memory access vulnerability in Adobe Media Encoder that allows arbitrary code execution when parsing malicious SVG files...

CVE-2021-36072 is an out-of-bounds write vulnerability in Adobe Bridge that allows arbitrary code execution when a user opens a malicious file. This a...

CVE-2021-36046 is a memory corruption vulnerability in Adobe XMP Toolkit versions 2020.1 and earlier that could allow arbitrary code execution when pr...

CVE-2021-36048 is an improper input validation vulnerability in Adobe XMP Toolkit SDK that could allow arbitrary code execution when a user opens a ma...

CVE-2021-36050 is a heap-based buffer overflow vulnerability in Adobe XMP Toolkit SDK that could allow arbitrary code execution when processing malici...

CVE-2021-36055 is a use-after-free vulnerability in Adobe XMP Toolkit SDK that could allow arbitrary code execution when a user opens a malicious file...

This CVE describes an XML injection vulnerability in Magento Commerce's 'City' field that allows unauthenticated attackers to execute arbitrary code r...