Adobe known exploited vulnerabilities
The Beam CVE database tracks 82 known exploited vulnerabilities for Adobe: 31 critical, 49 high and 2 medium severity. The newest is CVE-2026-75650, published Sep 7, 2026.
These are the Adobe vulnerabilities in CISA’s Known Exploited Vulnerabilities catalog: flaws with confirmed exploitation in the wild. Each entry links the vendor bulletin and CISA’s required action.
- Vulnerabilities tracked
- 82
- Critical
- 31
- Known exploited (CISA KEV)
- 82
- Published in the last 30 days
- 0
All entries, newest first
CVE-2026-75650
Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
critical10.0ExploitedSep 7, 2026CVE-2026-71362
Adobe Commerce and Magento Incorrect Authorization Vulnerability
critical9.1ExploitedAug 11, 2026CVE-2026-48282
Adobe ColdFusion Path Traversal Vulnerability
critical10.0ExploitedJun 30, 2026CVE-2026-34621
Adobe Acrobat and Reader Prototype Pollution Vulnerability
high8.6ExploitedApr 11, 2026CVE-2025-54236
Adobe Commerce and Magento Improper Input Validation Vulnerability
critical9.1ExploitedSep 9, 2025CVE-2025-54253
Adobe Experience Manager Forms Code Execution Vulnerability
critical10.0ExploitedAug 5, 2025CVE-2024-34102
Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability
critical9.8ExploitedJun 13, 2024CVE-2024-20767
Adobe ColdFusion Improper Access Control Vulnerability
high7.4ExploitedMar 18, 2024CVE-2023-38205
Adobe ColdFusion Improper Access Control Vulnerability
high7.5ExploitedSep 14, 2023CVE-2023-26369
Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability
high7.8ExploitedSep 13, 2023CVE-2023-38203
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
critical9.8ExploitedJul 20, 2023CVE-2023-29298
Adobe ColdFusion Improper Access Control Vulnerability
high7.5ExploitedJul 12, 2023CVE-2023-29300
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
critical9.8ExploitedJul 12, 2023CVE-2023-26359
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
critical9.8ExploitedMar 23, 2023CVE-2023-26360
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
high8.6ExploitedMar 23, 2023CVE-2023-21608
Adobe Acrobat and Reader Use-After-Free Vulnerability
high7.8ExploitedJan 18, 2023CVE-2022-24086
Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability
critical9.8ExploitedFeb 16, 2022CVE-2021-28550
Adobe Acrobat and Reader Use-After-Free Vulnerability
high8.8ExploitedSep 2, 2021CVE-2021-21017
Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability
high8.8ExploitedFeb 11, 2021CVE-2020-9715
Adobe Acrobat Use-After-Free Vulnerability
high7.8ExploitedAug 19, 2020CVE-2018-15982
Adobe Flash Player Use-After-Free Vulnerability
high7.8ExploitedJan 18, 2019CVE-2018-15961
Adobe ColdFusion Unrestricted File Upload Vulnerability
critical9.8ExploitedSep 25, 2018CVE-2018-4990
Adobe Acrobat and Reader Double Free Vulnerability
high8.8ExploitedJul 9, 2018CVE-2018-5002
Adobe Flash Player Stack-based Buffer Overflow Vulnerability
high7.8ExploitedJul 9, 2018CVE-2018-4939
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
critical9.8ExploitedMay 19, 2018CVE-2018-4878
Adobe Flash Player Use-After-Free Vulnerability
high7.8ExploitedFeb 6, 2018CVE-2017-11292
Adobe Flash Player Type Confusion Vulnerability
high8.8ExploitedOct 22, 2017CVE-2017-3066
Adobe ColdFusion Deserialization Vulnerability
critical9.8ExploitedApr 27, 2017CVE-2016-7892
Adobe Flash Player Use-After-Free Vulnerability
high8.8ExploitedDec 15, 2016CVE-2016-7855
Adobe Flash Player Use-After-Free Vulnerability
high8.8ExploitedNov 1, 2016CVE-2016-4171
Adobe Flash Player Remote Code Execution Vulnerability
critical9.8ExploitedJun 16, 2016CVE-2016-4117
Adobe Flash Player Arbitrary Code Execution Vulnerability
critical9.8ExploitedMay 11, 2016CVE-2016-1019
Adobe Flash Player Arbitrary Code Execution Vulnerability
critical9.8ExploitedApr 7, 2016CVE-2016-1010
Adobe Flash Player and AIR Integer Overflow Vulnerability
high8.8ExploitedMar 12, 2016CVE-2016-0984
Adobe Flash Player and AIR Use-After-Free Vulnerability
high8.8ExploitedFeb 10, 2016CVE-2015-8651
Adobe Flash Player Integer Overflow Vulnerability
high8.8ExploitedDec 28, 2015CVE-2015-7645
Adobe Flash Player Arbitrary Code Execution Vulnerability
high7.8ExploitedOct 15, 2015CVE-2015-5122
Adobe Flash Player Use-After-Free Vulnerability
critical9.8ExploitedJul 14, 2015CVE-2015-5123
Adobe Flash Player Use-After-Free Vulnerability
critical9.8ExploitedJul 14, 2015CVE-2015-5119
Adobe Flash Player Use-After-Free Vulnerability
critical9.8ExploitedJul 8, 2015CVE-2015-3113
Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
critical9.8ExploitedJun 23, 2015CVE-2015-3043
Adobe Flash Player Memory Corruption Vulnerability
critical9.8ExploitedApr 14, 2015CVE-2015-0313
Adobe Flash Player Use-After-Free Vulnerability
critical9.8ExploitedFeb 2, 2015CVE-2015-0310
Adobe Flash Player ASLR Bypass Vulnerability
high7.8ExploitedJan 23, 2015CVE-2015-0311
Adobe Flash Player Remote Code Execution Vulnerability
critical9.8ExploitedJan 23, 2015CVE-2014-9163
Adobe Flash Player Stack-Based Buffer Overflow Vulnerability
high7.8ExploitedDec 10, 2014CVE-2014-8439
Adobe Flash Player Dereferenced Pointer Vulnerability
high8.8ExploitedNov 25, 2014CVE-2014-0546
Adobe Reader and Acrobat Sandbox Bypass Vulnerability
critical9.8ExploitedAug 12, 2014CVE-2014-0502
Adobe Flash Player Double Free Vulnerablity
high8.8ExploitedFeb 21, 2014CVE-2014-0497
Adobe Flash Player Integer Underflow Vulnerablity
critical9.8ExploitedFeb 5, 2014CVE-2014-0496
Adobe Reader and Acrobat Use-After-Free Vulnerability
high8.8ExploitedJan 15, 2014CVE-2013-3346
Adobe Reader and Acrobat Memory Corruption Vulnerability
critical9.8ExploitedAug 30, 2013CVE-2013-2729
Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability
critical9.8ExploitedMay 16, 2013CVE-2013-0643
Adobe Flash Player Incorrect Default Permissions Vulnerability
high8.8ExploitedFeb 27, 2013CVE-2013-0648
Adobe Flash Player Code Execution Vulnerability
high8.8ExploitedFeb 27, 2013CVE-2013-0640
Adobe Reader and Acrobat Memory Corruption Vulnerability
high7.8ExploitedFeb 14, 2013CVE-2013-0641
Adobe Reader Buffer Overflow Vulnerability
high7.8ExploitedFeb 14, 2013CVE-2013-0632
Adobe ColdFusion Authentication Bypass Vulnerability
critical9.8ExploitedJan 17, 2013CVE-2013-0625
Adobe ColdFusion Authentication Bypass Vulnerability
critical9.8ExploitedJan 9, 2013CVE-2013-0629
Adobe ColdFusion Directory Traversal Vulnerability
high7.5ExploitedJan 9, 2013CVE-2013-0631
Adobe ColdFusion Information Disclosure Vulnerability
high7.5ExploitedJan 9, 2013CVE-2012-5054
Adobe Flash Player Integer Overflow Vulnerability
high8.8ExploitedSep 24, 2012CVE-2012-1535
Adobe Flash Player Arbitrary Code Execution Vulnerability
high7.8ExploitedAug 15, 2012CVE-2012-2034
Adobe Flash Player Memory Corruption Vulnerability
high7.5ExploitedJun 9, 2012CVE-2012-0754
Adobe Flash Player Memory Corruption Vulnerability
high8.1ExploitedFeb 16, 2012CVE-2012-0767
Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability
medium6.1ExploitedFeb 16, 2012CVE-2011-2462
Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability
critical9.8ExploitedDec 7, 2011CVE-2011-0611
Adobe Flash Player Remote Code Execution Vulnerability
high8.8ExploitedApr 13, 2011CVE-2011-0609
Adobe Flash Player Unspecified Vulnerability
high7.8ExploitedMar 15, 2011CVE-2010-2883
Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability
high7.3ExploitedSep 9, 2010CVE-2010-2861
Adobe ColdFusion Directory Traversal Vulnerability
critical9.8ExploitedAug 11, 2010CVE-2010-1297
Adobe Flash Player Memory Corruption Vulnerability
high7.8ExploitedJun 8, 2010CVE-2010-0188
Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability
high7.8ExploitedFeb 22, 2010CVE-2009-3960
Adobe BlazeDS Information Disclosure Vulnerability
medium6.5ExploitedFeb 15, 2010CVE-2009-3953
Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
high8.8ExploitedJan 13, 2010CVE-2009-4324
Adobe Acrobat and Reader Use-After-Free Vulnerability
high7.8ExploitedDec 15, 2009CVE-2009-3459
Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
high8.8ExploitedOct 13, 2009CVE-2009-1862
Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability
high7.8ExploitedJul 23, 2009CVE-2009-0927
Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability
high8.8ExploitedMar 19, 2009CVE-2008-2992
Adobe Reader and Acrobat Input Validation Vulnerability
high7.8ExploitedNov 4, 2008CVE-2007-5659
Adobe Acrobat and Reader Buffer Overflow Vulnerability
high7.8ExploitedFeb 12, 2008CVE-2008-0655
Adobe Acrobat and Reader Unspecified Vulnerability
high8.8ExploitedFeb 7, 2008
