Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

Adobe — Vulnerabilities & Security Advisories 4340

Browse all 4340 CVE security advisories affecting Adobe. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Adobe Systems Incorporated primarily develops multimedia and creativity software, most notably the PDF format and the Creative Cloud suite. With a vast attack surface encompassing 4,289 recorded CVEs, the company has historically faced significant security challenges. Common vulnerability classes include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from complex legacy codebases and third-party integrations. Notable incidents include critical RCE vulnerabilities in Acrobat Reader and Flash Player, which were frequently exploited by state-sponsored actors and criminal syndicates. The discontinuation of Flash Player marked a pivotal shift, yet the persistence of high-severity bugs in PDF parsing and document processing engines continues to pose risks. Adobe’s extensive market share makes it a high-value target, necessitating rigorous patch management and secure coding practices to mitigate the ongoing threat landscape associated with its widely deployed enterprise and consumer applications.

CVE IDTitleCVSSSeverityPublished
CVE-2025-43570 Substance3D - Stager | Use After Free (CWE-416) — Substance3D - StagerCWE-416 7.8 High2025-05-13
CVE-2025-43551 Substance3D - Stager | Out-of-bounds Read (CWE-125) — Substance3D - StagerCWE-125 5.5 Medium2025-05-13
CVE-2025-43568 Substance3D - Stager | Use After Free (CWE-416) — Substance3D - StagerCWE-416 7.8 High2025-05-13
CVE-2025-43549 Substance3D - Stager | Use After Free (CWE-416) — Substance3D - StagerCWE-416 7.8 High2025-05-13
CVE-2025-43572 Dimension | Out-of-bounds Write (CWE-787) — DimensionCWE-787 7.8 High2025-05-13
CVE-2025-43548 Dimension | Out-of-bounds Write (CWE-787) — DimensionCWE-787 7.8 High2025-05-13
CVE-2025-43547 Bridge | Integer Overflow or Wraparound (CWE-190) — BridgeCWE-190 7.8 High2025-05-13
CVE-2025-43546 Bridge | Integer Underflow (Wrap or Wraparound) (CWE-191) — BridgeCWE-191 7.8 High2025-05-13
CVE-2025-43545 Bridge | Access of Uninitialized Pointer (CWE-824) — BridgeCWE-824 7.8 High2025-05-13
CVE-2025-30330 Illustrator | Heap-based Buffer Overflow (CWE-122) — IllustratorCWE-122 7.8 High2025-05-13
CVE-2025-30329 Animate | NULL Pointer Dereference (CWE-476) — AnimateCWE-476 5.5 Medium2025-05-13
CVE-2025-43557 Animate | Access of Uninitialized Pointer (CWE-824) — AnimateCWE-824 7.8 High2025-05-13
CVE-2025-43556 Animate | Integer Overflow or Wraparound (CWE-190) — AnimateCWE-190 7.8 High2025-05-13
CVE-2025-43555 Animate | Integer Underflow (Wrap or Wraparound) (CWE-191) — AnimateCWE-191 7.8 High2025-05-13
CVE-2025-30328 Animate | Out-of-bounds Write (CWE-787) — AnimateCWE-787 7.8 High2025-05-13
CVE-2025-30325 Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) — Photoshop DesktopCWE-190 7.8 High2025-05-13
CVE-2025-30326 Photoshop Desktop | Access of Uninitialized Pointer (CWE-824) — Photoshop DesktopCWE-824 7.8 High2025-05-13
CVE-2025-30324 Photoshop Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191) — Photoshop DesktopCWE-191 7.8 High2025-05-13
CVE-2025-30322 Substance3D - Painter | Out-of-bounds Write (CWE-787) — Substance3D - PainterCWE-787 7.8 High2025-05-13
CVE-2025-27197 Lightroom Desktop | Out-of-bounds Write (CWE-787) — Lightroom DesktopCWE-787 7.8 High2025-05-13
CVE-2025-30320 InDesign Desktop | NULL Pointer Dereference (CWE-476) — InDesign DesktopCWE-476 5.5 Medium2025-05-13
CVE-2025-30318 InDesign Desktop | Out-of-bounds Write (CWE-787) — InDesign DesktopCWE-787 7.8 High2025-05-13
CVE-2025-30319 InDesign Desktop | NULL Pointer Dereference (CWE-476) — InDesign DesktopCWE-476 5.5 Medium2025-05-13
CVE-2025-30310 Dreamweaver Desktop | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843) — Dreamweaver DesktopCWE-843 7.8 High2025-05-13
CVE-2025-27190 Adobe Commerce | Improper Access Control (CWE-284) — Adobe CommerceCWE-284 5.3 Medium2025-04-08
CVE-2025-27191 Adobe Commerce | Improper Access Control (CWE-284) — Adobe CommerceCWE-284 5.3 Medium2025-04-08
CVE-2025-27192 Adobe Commerce | Insufficiently Protected Credentials (CWE-522) — Adobe CommerceCWE-522 2.7 Low2025-04-08
CVE-2025-27188 Adobe Commerce | Incorrect Authorization (CWE-863) — Adobe CommerceCWE-863 4.3 Medium2025-04-08
CVE-2025-27189 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) — Adobe CommerceCWE-352 4.3 Medium2025-04-08
CVE-2025-30287 ColdFusion | Improper Authentication (CWE-287) — ColdFusionCWE-287 8.2 High2025-04-08

This page lists every published CVE security advisory associated with Adobe. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.