Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Adobe — Vulnerabilities & Security Advisories 4598

Browse all 4598 CVE security advisories affecting Adobe. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Adobe Systems Incorporated primarily develops multimedia and creativity software, most notably the PDF format and the Creative Cloud suite. With a vast attack surface encompassing 4,289 recorded CVEs, the company has historically faced significant security challenges. Common vulnerability classes include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from complex legacy codebases and third-party integrations. Notable incidents include critical RCE vulnerabilities in Acrobat Reader and Flash Player, which were frequently exploited by state-sponsored actors and criminal syndicates. The discontinuation of Flash Player marked a pivotal shift, yet the persistence of high-severity bugs in PDF parsing and document processing engines continues to pose risks. Adobe’s extensive market share makes it a high-value target, necessitating rigorous patch management and secure coding practices to mitigate the ongoing threat landscape associated with its widely deployed enterprise and consumer applications.

CVE IDTitleCVSSSeverityPublished
CVE-2025-61842 Format Plugins | Use After Free (CWE-416) — Format PluginsCWE-416 5.5 Medium2025-11-11
CVE-2025-61830 Adobe Pass | Incorrect Authorization (CWE-863) — Adobe PassCWE-863 7.1 High2025-11-11
CVE-2025-61828 Illustrator on iPad | Out-of-bounds Write (CWE-787) — Illustrator on iPadCWE-787 7.8 High2025-11-11
CVE-2025-61827 Illustrator on iPad | Heap-based Buffer Overflow (CWE-122) — Illustrator on iPadCWE-122 7.8 High2025-11-11
CVE-2025-61826 Illustrator on iPad | Integer Underflow (Wrap or Wraparound) (CWE-191) — Illustrator on iPadCWE-191 7.8 High2025-11-11
CVE-2025-61829 Illustrator on iPad | Heap-based Buffer Overflow (CWE-122) — Illustrator on iPadCWE-122 7.8 High2025-11-11
CVE-2025-61836 Illustrator on iPad | Integer Underflow (Wrap or Wraparound) (CWE-191) — Illustrator on iPadCWE-191 7.8 High2025-11-11
CVE-2025-61831 Illustrator | Out-of-bounds Write (CWE-787) — IllustratorCWE-787 7.8 High2025-11-11
CVE-2025-61820 Illustrator | Heap-based Buffer Overflow (CWE-122) — IllustratorCWE-122 7.8 High2025-11-11
CVE-2025-61819 Photoshop Desktop | Heap-based Buffer Overflow (CWE-122) — Photoshop DesktopCWE-122 7.8 High2025-11-11
CVE-2025-61818 InCopy | Use After Free (CWE-416) — InCopyCWE-416 7.8 High2025-11-11
CVE-2025-61816 InCopy | Heap-based Buffer Overflow (CWE-122) — InCopyCWE-122 7.8 High2025-11-11
CVE-2025-61817 InCopy | Use After Free (CWE-416) — InCopyCWE-416 7.8 High2025-11-11
CVE-2025-61815 InDesign Desktop | Use After Free (CWE-416) — InDesign DesktopCWE-416 7.8 High2025-11-11
CVE-2025-61814 InDesign Desktop | Use After Free (CWE-416) — InDesign DesktopCWE-416 7.8 High2025-11-11
CVE-2025-61824 InDesign Desktop | Heap-based Buffer Overflow (CWE-122) — InDesign DesktopCWE-122 7.8 High2025-11-11
CVE-2025-61832 InDesign Desktop | Heap-based Buffer Overflow (CWE-122) — InDesign DesktopCWE-122 7.8 High2025-11-11
CVE-2025-54271 Creative Cloud Desktop | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) — Creative Cloud DesktopCWE-367 5.6 Medium2025-10-15
CVE-2025-54268 Bridge | Heap-based Buffer Overflow (CWE-122) — BridgeCWE-122 7.8 High2025-10-15
CVE-2025-54278 Bridge | Heap-based Buffer Overflow (CWE-122) — BridgeCWE-122 5.5 Medium2025-10-15
CVE-2025-61804 Animate | Heap-based Buffer Overflow (CWE-122) — AnimateCWE-122 7.8 High2025-10-15
CVE-2025-54279 Animate | Use After Free (CWE-416) — AnimateCWE-416 7.8 High2025-10-15
CVE-2025-54269 Animate | Out-of-bounds Read (CWE-125) — AnimateCWE-125 5.5 Medium2025-10-15
CVE-2025-54270 Animate | NULL Pointer Dereference (CWE-476) — AnimateCWE-476 5.5 Medium2025-10-15
CVE-2025-49552 Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe ConnectCWE-79 8.1 High2025-10-14
CVE-2025-49553 Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79) — Adobe ConnectCWE-79 9.3 Critical2025-10-14
CVE-2025-54196 Adobe Connect | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601) — Adobe ConnectCWE-601 4.3 Medium2025-10-14
CVE-2025-61797 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience ManagerCWE-79 5.4 Medium2025-10-14
CVE-2025-54272 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience ManagerCWE-79 5.4 Medium2025-10-14
CVE-2025-61796 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe Experience ManagerCWE-79 5.4 Medium2025-10-14

This page lists every published CVE security advisory associated with Adobe. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.