← Back

Adobe

adobe

7,498 CVEs • 184 products

Products (184)

Click to collapse
Toggle
Acrobat Dc
acrobat_dc
Acrobat
acrobat
Air
air
Air Sdk
air_sdk
Reader
reader
Coldfusion
coldfusion
Indesign
indesign
Commerce
commerce
Illustrator
illustrator
Magento
magento
Bridge
bridge
Adobe Air
adobe_air
Commerce B2b
commerce_b2b
Framemaker
framemaker
Dimension
dimension
Animate
animate
Adobe Air Sdk
adobe_air_sdk
Photoshop
photoshop
Photoshop Cc
photoshop_cc
Connect
connect
Media Encoder
media_encoder
Incopy
incopy
C2pa
c2pa
C2pa Web
c2pa-web
Audition
audition
Premiere Pro
premiere_pro
C2patool
c2patool
Campaign
campaign
Premiere Rush
premiere_rush
Dreamweaver
dreamweaver
Prelude
prelude
Lightroom
lightroom
Robohelp
robohelp
Flex
flex
Bridge Cc
bridge_cc
I/o Events
i/o_events
Captivate
captivate
Pagemaker
pagemaker
Jrun
jrun
Livecycle
livecycle
Phonegap
phonegap
Version Cue
version_cue
Acrobat 3d
acrobat_3d
Photoshop Cs4
photoshop_cs4
Acrobat 2017
acrobat_2017
Premiere
premiere
Flex Sdk
flex_sdk
Blazeds
blazeds

CVEs (7,498)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Adobe
2Adobe Air
Flash Player
Apr 23, 2026
Dec 10, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exceptio...Show more
Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exception_count value that triggers memory corruption, related to "generation of ActionScript exception handlers."Show less
1Adobe
2Adobe Air
Flash Player
Apr 23, 2026
Dec 10, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.
1Adobe
2Adobe Air
Flash Player
Apr 23, 2026
Dec 10, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Adobe Flash Player 10.x before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.
1Adobe
2Adobe Air
Flash Player
Apr 23, 2026
Dec 10, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors, related to a "data injection vulnerability."
1Adobe
2Adobe Air
Flash Player
Apr 23, 2026
Dec 10, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via crafted dimensions of JPEG data in an SWF file.
1Adobe
1Illustrator
Apr 23, 2026
Dec 4, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file. NOTE: some of th...Show more
Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file. NOTE: some of these details are obtained from third party information.Show less
1Adobe
1Shockwave Player
Apr 23, 2026
Nov 4, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption, related to an "invalid string length vulnerability." NOTE: some of these...Show more
Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption, related to an "invalid string length vulnerability." NOTE: some of these details are obtained from third party information.Show less
1Adobe
1Shockwave Player
Apr 23, 2026
Nov 4, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3464....Show more
Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3464. NOTE: some of these details are obtained from third party information.Show less
1Adobe
1Shockwave Player
Apr 23, 2026
Nov 4, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3465....Show more
Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3465. NOTE: some of these details are obtained from third party information.Show less
1Adobe
1Shockwave Player
Apr 23, 2026
Nov 4, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Array index error in Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site. NOTE: some of these details are obtained from third party info...Show more
Array index error in Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site. NOTE: some of these details are obtained from third party information.Show less
1Adobe
2Acrobat
Acrobat Reader
Apr 23, 2026
Oct 19, 2009
N/A· v4
N/A· v3
5.1 MEDIUM· v2
Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Unix, when Debug mode is enabled, allow attackers to execute arbitrary code via unspecified vectors, related to a "format bug."
1Adobe
1Acrobat
Apr 23, 2026
Oct 19, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Unspecified vulnerability in Adobe Acrobat 9.x before 9.2 allows attackers to bypass intended file-extension restrictions via unknown vectors.
1Adobe
1Acrobat
Apr 23, 2026
Oct 19, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Adobe Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
1Adobe
2Acrobat
Acrobat Reader
Apr 23, 2026
Oct 19, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability tha...Show more
Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2998.Show less
1Adobe
2Acrobat
Acrobat Reader
Apr 23, 2026
Oct 19, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability tha...Show more
Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-3458.Show less
1Adobe
2Acrobat
Acrobat Reader
Apr 23, 2026
Oct 19, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors.
1Adobe
2Acrobat
Acrobat Reader
Apr 23, 2026
Oct 19, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vul...Show more
Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2009-2985.Show less
1Adobe
1Acrobat
Apr 23, 2026
Oct 19, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Integer overflow in Adobe Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows attackers to cause a denial of service via unspecified vectors.
1Adobe
2Acrobat
Acrobat Reader
Apr 23, 2026
Oct 19, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 might allow attackers to execute arbitrary code via unspecified vectors.
1Adobe
2Acrobat
Acrobat Reader
Apr 23, 2026
Oct 19, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
The JavaScript for Acrobat API in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 does not properly implement the (1) Privileged Context and (2) Safe Path restrictions for unspecified Java...Show more
The JavaScript for Acrobat API in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 does not properly implement the (1) Privileged Context and (2) Safe Path restrictions for unspecified JavaScript methods, which allows remote attackers to create arbitrary files, and possibly execute arbitrary code, via the cPath parameter in a crafted PDF file. NOTE: some of these details are obtained from third party information.Show less