← Back

Adobe

adobe

7,498 CVEs • 184 products

Products (184)

Click to collapse
Toggle
Acrobat Dc
acrobat_dc
Acrobat
acrobat
Air
air
Air Sdk
air_sdk
Reader
reader
Coldfusion
coldfusion
Indesign
indesign
Commerce
commerce
Illustrator
illustrator
Magento
magento
Bridge
bridge
Adobe Air
adobe_air
Commerce B2b
commerce_b2b
Framemaker
framemaker
Dimension
dimension
Animate
animate
Adobe Air Sdk
adobe_air_sdk
Photoshop
photoshop
Photoshop Cc
photoshop_cc
Connect
connect
Media Encoder
media_encoder
Incopy
incopy
C2pa
c2pa
C2pa Web
c2pa-web
Audition
audition
Premiere Pro
premiere_pro
C2patool
c2patool
Campaign
campaign
Premiere Rush
premiere_rush
Dreamweaver
dreamweaver
Prelude
prelude
Lightroom
lightroom
Robohelp
robohelp
Flex
flex
Bridge Cc
bridge_cc
I/o Events
i/o_events
Captivate
captivate
Pagemaker
pagemaker
Jrun
jrun
Livecycle
livecycle
Phonegap
phonegap
Version Cue
version_cue
Acrobat 3d
acrobat_3d
Photoshop Cs4
photoshop_cs4
Acrobat 2017
acrobat_2017
Premiere
premiere
Flex Sdk
flex_sdk
Blazeds
blazeds

CVEs (7,498)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Adobe
1Shockwave Player
Apr 29, 2026
May 13, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow attackers to execute arbitrary code via unspecified vectors.
1Adobe
1Shockwave Player
Apr 29, 2026
May 13, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-201...Show more
Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291.Show less
1Adobe
1Shockwave Player
Apr 29, 2026
May 13, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-201...Show more
Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1287, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291.Show less
1Adobe
1Shockwave Player
Apr 29, 2026
May 13, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1286, CVE-201...Show more
Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1286, CVE-2010-1287, CVE-2010-1289, CVE-2010-1290, and CVE-2010-1291.Show less
1Adobe
1Coldfusion
Apr 29, 2026
May 13, 2010
N/A· v4
N/A· v3
2.1 LOW· v2
Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows local users to obtain sensitive information via unknown vectors.
1Adobe
1Coldfusion
Apr 29, 2026
May 13, 2010
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the Administrator page in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
1Adobe
1Shockwave Player
Apr 29, 2026
May 13, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
The implementation of pami RIFF chunk parsing in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execu...Show more
The implementation of pami RIFF chunk parsing in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file.Show less
1Adobe
1Shockwave Player
Apr 29, 2026
May 13, 2010
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir (aka Director) files, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via...Show more
Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir (aka Director) files, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a modified field in a 0xFFFFFF49 record.Show less
1Adobe
1Shockwave Player
Apr 29, 2026
May 13, 2010
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Adobe Shockwave Player before 11.5.7.609 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted ATOM size in a .dir (aka Director) file.
1Adobe
1Shockwave Player
Apr 29, 2026
May 13, 2010
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial...Show more
iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file.Show less
1Adobe
1Shockwave Player
Apr 29, 2026
May 13, 2010
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file, related to (1) an erroneous dereference...Show more
Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file, related to (1) an erroneous dereference and (2) a certain Shock.dir file.Show less
1Adobe
1Shockwave Player
Apr 29, 2026
May 13, 2010
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Heap-based buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via crafted embedded fonts in a Shockwave file.
1Adobe
1Shockwave Player
Apr 29, 2026
May 13, 2010
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Adobe Shockwave Player before 11.5.7.609 does not properly process asset entries, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted Shockwave...Show more
Adobe Shockwave Player before 11.5.7.609 does not properly process asset entries, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted Shockwave file.Show less
1Adobe
1Shockwave Player
Apr 29, 2026
May 13, 2010
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Integer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via a crafted .dir (aka Director) file.
1Adobe
1Shockwave Player
Apr 29, 2026
May 13, 2010
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir (aka Director) file tha...Show more
Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir (aka Director) file that triggers an array index error.Show less
1Adobe
2Director
Shockwave Player
Apr 29, 2026
May 13, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Integer signedness error in dirapi.dll in Adobe Shockwave Player before 11.5.7.609 and Adobe Director before 11.5.7.609 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitra...Show more
Integer signedness error in dirapi.dll in Adobe Shockwave Player before 11.5.7.609 and Adobe Director before 11.5.7.609 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir file that triggers an invalid read operation.Show less
1Adobe
1Shockwave Player
Apr 29, 2026
May 13, 2010
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted FFFFFF45h Shockwave 3D blocks in a Shockwave file.
1Adobe
1Coldfusion
Apr 29, 2026
May 13, 2010
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in an unspecified method in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
1Adobe
1Photoshop Cs4
Apr 29, 2026
May 5, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple unspecified vulnerabilities in Adobe Photoshop CS4 11.x before 11.0.1 allow user-assisted remote attackers to execute arbitrary code via a crafted TIFF file.
1Adobe
2Acrobat
Reader
Apr 29, 2026
Apr 22, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in the Atlcom.get_atlcom ActiveX control in gp.ocx in Adobe Download Manager, as used in Adobe Reader and Acrobat 8.x before 8.2 and 9.x before 9.3, allows remote attackers to execute arbitrary code via u...Show more
Buffer overflow in the Atlcom.get_atlcom ActiveX control in gp.ocx in Adobe Download Manager, as used in Adobe Reader and Acrobat 8.x before 8.2 and 9.x before 9.3, allows remote attackers to execute arbitrary code via unspecified parameters.Show less