Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

Adobe — Vulnerabilities & Security Advisories 4340

Browse all 4340 CVE security advisories affecting Adobe. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Adobe Systems Incorporated primarily develops multimedia and creativity software, most notably the PDF format and the Creative Cloud suite. With a vast attack surface encompassing 4,289 recorded CVEs, the company has historically faced significant security challenges. Common vulnerability classes include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from complex legacy codebases and third-party integrations. Notable incidents include critical RCE vulnerabilities in Acrobat Reader and Flash Player, which were frequently exploited by state-sponsored actors and criminal syndicates. The discontinuation of Flash Player marked a pivotal shift, yet the persistence of high-severity bugs in PDF parsing and document processing engines continues to pose risks. Adobe’s extensive market share makes it a high-value target, necessitating rigorous patch management and secure coding practices to mitigate the ongoing threat landscape associated with its widely deployed enterprise and consumer applications.

Found 169 results / 4340Clear Filters
CVE IDTitleCVSSSeverityPublished
CVE-2026-34656 Adobe Commerce | Improper Authorization (CWE-285) — Adobe CommerceCWE-285 4.3 Medium2026-05-12
CVE-2026-34650 Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) — Adobe CommerceCWE-400 7.5 High2026-05-12
CVE-2026-34658 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe CommerceCWE-79 4.8 Medium2026-05-12
CVE-2026-34686 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe CommerceCWE-79 8.7 High2026-05-12
CVE-2026-34647 Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918) — Adobe CommerceCWE-918 7.4 High2026-05-12
CVE-2026-34685 Adobe Commerce | Improper Input Validation (CWE-20) — Adobe CommerceCWE-20 3.4 Low2026-05-12
CVE-2026-34653 Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) — Adobe CommerceCWE-22 8.7 High2026-05-12
CVE-2026-34652 Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395) — Adobe CommerceCWE-1395 7.5 High2026-05-12
CVE-2026-34645 Adobe Commerce | Incorrect Authorization (CWE-863) — Adobe CommerceCWE-863 7.5 High2026-05-12
CVE-2026-34648 Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) — Adobe CommerceCWE-400 7.5 High2026-05-12
CVE-2026-34649 Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) — Adobe CommerceCWE-400 7.5 High2026-05-12
CVE-2026-34655 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe CommerceCWE-79 4.8 Medium2026-05-12
CVE-2026-34651 Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) — Adobe CommerceCWE-400 7.5 High2026-05-12
CVE-2026-34654 Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395) — Adobe CommerceCWE-1395 5.3 Medium2026-05-12
CVE-2026-34646 Adobe Commerce | Incorrect Authorization (CWE-863) — Adobe CommerceCWE-863 7.5 High2026-05-12
CVE-2026-21291 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe CommerceCWE-79 4.8 Medium2026-03-11
CVE-2026-21293 Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918) — Adobe CommerceCWE-918 5.5 Medium2026-03-11
CVE-2026-21282 Adobe Commerce | Improper Input Validation (CWE-20) — Adobe CommerceCWE-20 5.3 Medium2026-03-11
CVE-2026-21286 Adobe Commerce | Incorrect Authorization (CWE-863) — Adobe CommerceCWE-863 5.3 Medium2026-03-11
CVE-2026-21294 Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918) — Adobe CommerceCWE-918 5.5 Medium2026-03-11
CVE-2026-21284 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe CommerceCWE-79 8.1 High2026-03-11
CVE-2026-21297 Adobe Commerce | Incorrect Authorization (CWE-863) — Adobe CommerceCWE-863 4.3 Medium2026-03-11
CVE-2026-21359 Adobe Commerce | Incorrect Authorization (CWE-863) — Adobe CommerceCWE-863 4.7 Medium2026-03-11
CVE-2026-21309 Adobe Commerce | Incorrect Authorization (CWE-863) — Adobe CommerceCWE-863 7.5 High2026-03-11
CVE-2026-21292 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe CommerceCWE-79 5.4 Medium2026-03-11
CVE-2026-21310 Adobe Commerce | Improper Input Validation (CWE-20) — Adobe CommerceCWE-20 5.3 Medium2026-03-11
CVE-2026-21285 Adobe Commerce | Incorrect Authorization (CWE-863) — Adobe CommerceCWE-863 4.3 Medium2026-03-11
CVE-2026-21290 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe CommerceCWE-79 8.7 High2026-03-11
CVE-2026-21361 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe CommerceCWE-79 8.1 High2026-03-11
CVE-2026-21289 Adobe Commerce | Incorrect Authorization (CWE-863) — Adobe CommerceCWE-863 7.5 High2026-03-11

This page lists every published CVE security advisory associated with Adobe. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.