Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1110 CNY

100%

Adobe — Vulnerabilities & Security Advisories 4340

Browse all 4340 CVE security advisories affecting Adobe. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Adobe Systems Incorporated primarily develops multimedia and creativity software, most notably the PDF format and the Creative Cloud suite. With a vast attack surface encompassing 4,289 recorded CVEs, the company has historically faced significant security challenges. Common vulnerability classes include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from complex legacy codebases and third-party integrations. Notable incidents include critical RCE vulnerabilities in Acrobat Reader and Flash Player, which were frequently exploited by state-sponsored actors and criminal syndicates. The discontinuation of Flash Player marked a pivotal shift, yet the persistence of high-severity bugs in PDF parsing and document processing engines continues to pose risks. Adobe’s extensive market share makes it a high-value target, necessitating rigorous patch management and secure coding practices to mitigate the ongoing threat landscape associated with its widely deployed enterprise and consumer applications.

Found 169 results / 4340Clear Filters
CVE IDTitleCVSSSeverityPublished
CVE-2024-45127 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe CommerceCWE-79 4.8 Medium2024-10-10
CVE-2024-45128 Adobe Commerce | Incorrect Authorization (CWE-863) — Adobe CommerceCWE-863 5.4 Medium2024-10-10
CVE-2024-45133 Adobe Commerce | Improper Access Control (CWE-284) — Adobe CommerceCWE-284 2.7 Low2024-10-10
CVE-2024-45124 Adobe Commerce | Improper Access Control (CWE-284) — Adobe CommerceCWE-284 5.3 Medium2024-10-10
CVE-2024-45123 Adobe Commerce | Cross-site Scripting (Reflected XSS) (CWE-79) — Adobe CommerceCWE-79 6.1 Medium2024-10-10
CVE-2024-45121 Adobe Commerce | Improper Access Control (CWE-284) — Adobe CommerceCWE-284 4.3 Medium2024-10-10
CVE-2024-45117 Adobe Commerce | Improper Input Validation (CWE-20) — Adobe CommerceCWE-20 7.6 High2024-10-10
CVE-2024-45115 Adobe Commerce | Improper Authentication (CWE-287) — Adobe CommerceCWE-287 9.8 Critical2024-10-10
CVE-2024-45116 Adobe Commerce | Cross-site Scripting (XSS) (CWE-79) — Adobe CommerceCWE-79 8.1 High2024-10-10
CVE-2024-45119 Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918) — Adobe CommerceCWE-918 4.9 Medium2024-10-10
CVE-2024-45122 Adobe Commerce | Improper Access Control (CWE-284) — Adobe CommerceCWE-284 4.3 Medium2024-10-10
CVE-2024-45120 Adobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) — Adobe CommerceCWE-367 3.1 Low2024-10-10
CVE-2024-45135 Adobe Commerce | Improper Access Control (CWE-284) — Adobe CommerceCWE-284 2.7 Low2024-10-10
CVE-2024-45130 Adobe Commerce | Improper Access Control (CWE-284) — Adobe CommerceCWE-284 4.3 Medium2024-10-10
CVE-2024-45132 Adobe Commerce | Incorrect Authorization (CWE-863) — Adobe CommerceCWE-863 6.5 Medium2024-10-10
CVE-2024-45148 Adobe Commerce | Improper Authentication (CWE-287) — Adobe CommerceCWE-287 8.8 High2024-10-10
CVE-2024-45131 Adobe Commerce | Incorrect Authorization (CWE-863) — Adobe CommerceCWE-863 5.4 Medium2024-10-10
CVE-2024-45134 Adobe Commerce | Information Exposure (CWE-200) — Adobe CommerceCWE-200 2.7 Low2024-10-10
CVE-2024-45129 Adobe Commerce | Improper Access Control (CWE-284) — Adobe CommerceCWE-284 4.3 Medium2024-10-10
CVE-2024-45118 Adobe Commerce | Improper Access Control (CWE-284) — Adobe CommerceCWE-284 6.5 Medium2024-10-10
CVE-2024-45125 Adobe Commerce | Incorrect Authorization (CWE-863) — Adobe CommerceCWE-863 4.3 Medium2024-10-10
CVE-2024-45149 Adobe Commerce | Improper Access Control (CWE-284) — Adobe CommerceCWE-284 2.7 Low2024-10-10
CVE-2024-39419 A user without ship permissions can ship the orders — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-39403 Stored XSS through Webhook module public key configuration — Adobe CommerceCWE-79 7.6 High2024-08-14
CVE-2024-39418 Adobe Commerce | Improper Authorization (CWE-285) — Adobe CommerceCWE-285 5.4 Medium2024-08-14
CVE-2024-39413 An unauthorized user can export the Invoiced Sales Report — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-39408 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) — Adobe CommerceCWE-352 4.3 Medium2024-08-14
CVE-2024-39399 [Paris] Path Traversal lead to local file read — Adobe CommerceCWE-22 7.7 High2024-08-14
CVE-2024-39417 An unauthorized user can export the Shipping Report — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-39410 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) — Adobe CommerceCWE-352 4.3 Medium2024-08-14

This page lists every published CVE security advisory associated with Adobe. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.