Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1020 CNY

100%

Adobe — Vulnerabilities & Security Advisories 4340

Browse all 4340 CVE security advisories affecting Adobe. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Adobe Systems Incorporated primarily develops multimedia and creativity software, most notably the PDF format and the Creative Cloud suite. With a vast attack surface encompassing 4,289 recorded CVEs, the company has historically faced significant security challenges. Common vulnerability classes include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from complex legacy codebases and third-party integrations. Notable incidents include critical RCE vulnerabilities in Acrobat Reader and Flash Player, which were frequently exploited by state-sponsored actors and criminal syndicates. The discontinuation of Flash Player marked a pivotal shift, yet the persistence of high-severity bugs in PDF parsing and document processing engines continues to pose risks. Adobe’s extensive market share makes it a high-value target, necessitating rigorous patch management and secure coding practices to mitigate the ongoing threat landscape associated with its widely deployed enterprise and consumer applications.

CVE IDTitleCVSSSeverityPublished
CVE-2024-39386 ZDI-CAN-24057: Adobe Bridge AVI FIle Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability — BridgeCWE-787 7.8 High2024-08-14
CVE-2024-34117 Adobe Photoshop 2024 MPO File Parsing Use-After-Free vulnerability — Photoshop DesktopCWE-416 7.8 High2024-08-14
CVE-2024-34134 Illustrator | Out-of-bounds Read (CWE-125) — IllustratorCWE-125 5.5 Medium2024-08-14
CVE-2024-34136 Adobe Illustrator PSD File Parsing Null Pointer dereference — IllustratorCWE-476 5.5 Medium2024-08-14
CVE-2024-34118 Adobe illustrator 2024 TIF File parsing Division by zero denial of service — IllustratorCWE-20 5.5 Medium2024-08-14
CVE-2024-41856 Illustrator | Improper Input Validation (CWE-20) — IllustratorCWE-20 7.8 High2024-08-14
CVE-2024-34133 Adobe Illustrator CC 2023 v27.9 Vulnerability I — IllustratorCWE-787 7.8 High2024-08-14
CVE-2024-34138 Adobe Illustrator CGM File Parsing Division By zero — IllustratorCWE-476 5.5 Medium2024-08-14
CVE-2024-34137 Adobe Illustrator 2024 CGM File Parsing Null Pointer Dereference — IllustratorCWE-476 5.5 Medium2024-08-14
CVE-2024-34135 Adobe Illustrator CC 2023 v27.9 Vulnerability II — IllustratorCWE-125 5.5 Medium2024-08-14
CVE-2024-34125 ZDI-CAN-24027: Adobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — DimensionCWE-125 5.5 Medium2024-08-14
CVE-2024-41865 Adobe Dimension Untrusted Search Path lead to load malicious DLL swift.dll — DimensionCWE-426 7.8 High2024-08-14
CVE-2024-34126 ZDI-CAN-24028: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — DimensionCWE-125 5.5 Medium2024-08-14
CVE-2024-34124 ZDI-CAN-24031: Adobe Dimension SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability — DimensionCWE-787 7.8 High2024-08-14
CVE-2024-20789 ZDI-CAN-24030: Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability — DimensionCWE-416 7.8 High2024-08-14
CVE-2024-20790 Adobe Dimension Memory Corruption Out-of-Bounds-READ Vulnerability I, when parsing FBX file — DimensionCWE-125 5.5 Medium2024-08-14
CVE-2024-39403 Stored XSS through Webhook module public key configuration — Adobe CommerceCWE-79 7.6 High2024-08-14
CVE-2024-39419 A user without ship permissions can ship the orders — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-39418 Adobe Commerce | Improper Authorization (CWE-285) — Adobe CommerceCWE-285 5.4 Medium2024-08-14
CVE-2024-39413 An unauthorized user can export the Invoiced Sales Report — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-39399 [Paris] Path Traversal lead to local file read — Adobe CommerceCWE-22 7.7 High2024-08-14
CVE-2024-39408 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) — Adobe CommerceCWE-352 4.3 Medium2024-08-14
CVE-2024-39417 An unauthorized user can export the Shipping Report — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-39410 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) — Adobe CommerceCWE-352 4.3 Medium2024-08-14
CVE-2024-39407 Adobe Commerce | Improper Authorization (CWE-285) — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-39398 OTP 2FA can be bruteforced — Adobe CommerceCWE-307 7.4 High2024-08-14
CVE-2024-39401 Adobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) — Adobe CommerceCWE-78 8.4 High2024-08-14
CVE-2024-39397 Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) — Adobe CommerceCWE-434 9.0 Critical2024-08-14
CVE-2024-39409 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) — Adobe CommerceCWE-352 4.3 Medium2024-08-14
CVE-2024-39411 Adobe Commerce | Improper Authorization (CWE-285) — Adobe CommerceCWE-285 4.3 Medium2024-08-14

This page lists every published CVE security advisory associated with Adobe. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.