Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Adobe — Vulnerabilities & Security Advisories 4289

Browse all 4289 CVE security advisories affecting Adobe. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Adobe Systems Incorporated primarily develops multimedia and creativity software, most notably the PDF format and the Creative Cloud suite. With a vast attack surface encompassing 4,289 recorded CVEs, the company has historically faced significant security challenges. Common vulnerability classes include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from complex legacy codebases and third-party integrations. Notable incidents include critical RCE vulnerabilities in Acrobat Reader and Flash Player, which were frequently exploited by state-sponsored actors and criminal syndicates. The discontinuation of Flash Player marked a pivotal shift, yet the persistence of high-severity bugs in PDF parsing and document processing engines continues to pose risks. Adobe’s extensive market share makes it a high-value target, necessitating rigorous patch management and secure coding practices to mitigate the ongoing threat landscape associated with its widely deployed enterprise and consumer applications.

Found 422 results / 4289Clear Filters
Top products by Adobe: Adobe Experience Manager Adobe Acrobat and Reader Acrobat Reader Adobe Commerce Illustrator InDesign Desktop ColdFusion Dimension Bridge After Effects Animate Experience Manager Substance3D - Stager Magento Commerce Adobe Framemaker Substance3D - Painter InDesign InCopy Photoshop Media Encoder Substance3D - Modeler Adobe Photoshop CC Substance3D - Designer Adobe Connect Audition FrameMaker Magento Adobe Photoshop Photoshop Desktop Substance3D - Sampler
CVE IDTitleCVSSSeverityPublished
CVE-2023-38240 ZDI-CAN-21245: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Acrobat ReaderCWE-125 5.5 Medium2023-08-10
CVE-2023-38239 ZDI-CAN-21242: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Acrobat ReaderCWE-125 5.5 Medium2023-08-10
CVE-2023-38241 ZDI-CAN-21246: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability — Acrobat ReaderCWE-125 5.5 Medium2023-08-10
CVE-2023-38230 ZDI-CAN-21318: Adobe Acrobat Reader DC Font Parsing Use-After-Free Information Disclosure Vulnerability — Acrobat ReaderCWE-416 5.5 Medium2023-08-10
CVE-2023-38224 ZDI-CAN-21122: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability — Acrobat ReaderCWE-416 7.8 High2023-08-10
CVE-2023-38234 ZDI-CAN-21359: Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability — Acrobat ReaderCWE-824 7.8 High2023-08-10
CVE-2023-38243 ZDI-CAN-21252: Adobe Acrobat Reader DC JBIG2 File Parsing Use-After-Free Information Disclosure Vulnerability — Acrobat ReaderCWE-416 5.5 Medium2023-08-10
CVE-2023-26418 ZDI-CAN-20311: Adobe Acrobat Reader DC AcroForm exportAsFDFStr Use-After-Free Remote Code Execution Vulnerability — Acrobat ReaderCWE-416 7.8 High2023-04-12
CVE-2023-26395 Adobe Acrobat parsing PDF Out-of-bounds Write Arbitrary code execution — Acrobat ReaderCWE-787 7.8 High2023-04-12
CVE-2023-26396 Adobe Acrobat Reader DC for macOS installer (AcroRdrDC_2200220191_MUI.pkg) contains a local privilege escalation vulnerability. — Acrobat ReaderCWE-379 7.8 High2023-04-12
CVE-2023-26397 [ZS-VR-22-112] Adobe Acrobat Out-of-bounds Read Memory leak — Acrobat ReaderCWE-125 5.5 Medium2023-04-12
CVE-2023-26405 ZDI-CAN-20712: Object Prototype pollution which leads to API Restrictions Bypass — Acrobat ReaderCWE-20 7.8 High2023-04-12
CVE-2023-26406 ZDI-CAN-20712: Net.HTTP.request URL restriction bypass — Acrobat ReaderCWE-284 7.8 High2023-04-12
CVE-2023-26407 ZDI-CAN-20712: Net.HTTP.request Arbitrary Command Execution — Acrobat ReaderCWE-20 7.8 High2023-04-12
CVE-2023-26408 ZDI-CAN-20712: AnnotsString Object prototype pollution Restrictions Bypass Vulnerability — Acrobat ReaderCWE-284 7.8 High2023-04-12
CVE-2023-26417 ZDI-CAN-20583: Adobe Acrobat Reader DC Popup Use-After-Free Remote Code Execution Vulnerability — Acrobat ReaderCWE-416 7.8 High2023-04-12
CVE-2023-26419 ZDI-CAN-20274: Adobe Acrobat Reader DC AcroForm removeField Use-After-Free Remote Code Execution Vulnerability — Acrobat ReaderCWE-416 7.8 High2023-04-12
CVE-2023-26420 ZDI-CAN-20227: Adobe Acrobat Reader DC AcroForm addField Use-After-Free Remote Code Execution Vulnerability — Acrobat ReaderCWE-416 7.8 High2023-04-12
CVE-2023-26421 ZDI-CAN-19832: Adobe Acrobat Reader DC Doc Object Integer Underflow Remote Code Execution Vulnerability — Acrobat ReaderCWE-191 7.8 High2023-04-12
CVE-2023-26422 ZDI-CAN-20176: Adobe Acrobat Reader DC AcroForm deleteItemAt Use-After-Free Remote Code Execution Vulnerability — Acrobat ReaderCWE-416 7.8 High2023-04-12
CVE-2023-26423 ZDI-CAN-20160: Adobe Acrobat Reader DC AcroForm insertItemAt Use-After-Free Remote Code Execution Vulnerability — Acrobat ReaderCWE-416 7.8 High2023-04-12
CVE-2023-26424 ZDI-CAN-19833: Adobe Acrobat Reader DC PDF Parsing Use-After-Free Remote Code Execution Vulnerability — Acrobat ReaderCWE-416 7.8 High2023-04-12
CVE-2023-26425 ZDI-CAN-19854: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability — Acrobat ReaderCWE-125 7.8 High2023-04-12
CVE-2023-22241 ZDI-CAN-19516: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability — Acrobat ReaderCWE-787 7.8 High2023-01-27
CVE-2023-22240 ZDI-CAN-19517: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability — Acrobat ReaderCWE-787 7.8 High2023-01-27
CVE-2023-22242 ZDI-CAN-19515: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability — Acrobat ReaderCWE-787 7.8 High2023-01-27
CVE-2023-21605 Adobe Acrobat Reader DC Font Parsing Heap-based Buffer Overflow Arbitrary code execution — Acrobat ReaderCWE-122 7.8 High2023-01-18
CVE-2023-21607 Adobe Acrobat Reader Improper Input Validation Remote Code Execution Vulnerability — Acrobat ReaderCWE-20 7.8 High2023-01-18
CVE-2023-21606 Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability — Acrobat ReaderCWE-787 7.8 High2023-01-18
CVE-2023-21612 Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation — Acrobat ReaderCWE-379 7.8 High2023-01-18

This page lists every published CVE security advisory associated with Adobe. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.