Adobe: known exploited vulnerabilities
Entries82No. 4
Ransomware-linked11
Products13
Latest2026-09-24
Added per year
By product
33
16
13
8
2
2
2
1
1
1
1
1
1
Entries
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-71362 | Adobe Commerce and Magento | 2026-09-24 | 87.5% | Unknown |
| CVE-2026-75650 | Adobe Commerce and Magento | 2026-09-08 | 3.9% | Unknown |
| CVE-2026-48282 | Adobe ColdFusion | 2026-07-07 | 42.3% | Unknown |
| CVE-2009-3459 | Adobe Acrobat and Reader | 2026-05-20 | 86.5% | Unknown |
| CVE-2026-34621 | Adobe Acrobat and Reader | 2026-04-13 | 2.1% | Unknown |
| CVE-2020-9715 | Adobe Acrobat | 2026-04-13 | 48.5% | Unknown |
| CVE-2025-54236 | Adobe Commerce and Magento | 2025-10-24 | 94.5% | Unknown |
| CVE-2025-54253 | Adobe Experience Manager (AEM) Forms | 2025-10-15 | 88.2% | Unknown |
| CVE-2017-3066 | Adobe ColdFusion | 2025-02-24 | 90.5% | Unknown |
| CVE-2024-20767 | Adobe ColdFusion | 2024-12-16 | 98.5% | Unknown |
| CVE-2014-0502 | Adobe Flash Player | 2024-09-17 | 24.8% | Unknown |
| CVE-2014-0497 | Adobe Flash Player | 2024-09-17 | 99.8% | Unknown |
| CVE-2013-0648 | Adobe Flash Player | 2024-09-17 | 11.0% | Unknown |
| CVE-2013-0643 | Adobe Flash Player | 2024-09-17 | 10.5% | Unknown |
| CVE-2024-34102 | Adobe Commerce and Magento Open Source | 2024-07-17 | 99.9% | Unknown |
| CVE-2023-38203 | Adobe ColdFusion | 2024-01-08 | 97.0% | Known |
| CVE-2023-29300 | Adobe ColdFusion | 2024-01-08 | 99.9% | Known |
| CVE-2023-21608 | Adobe Acrobat and Reader | 2023-10-10 | 61.4% | Unknown |
| CVE-2023-26369 | Adobe Acrobat and Reader | 2023-09-14 | 6.7% | Unknown |
| CVE-2023-26359 | Adobe ColdFusion | 2023-08-21 | 16.9% | Unknown |
| CVE-2023-38205 | Adobe ColdFusion | 2023-07-20 | 99.7% | Unknown |
| CVE-2023-29298 | Adobe ColdFusion | 2023-07-20 | 99.7% | Unknown |
| CVE-2023-26360 | Adobe ColdFusion | 2023-03-15 | 97.3% | Unknown |
| CVE-2018-4990 | Adobe Acrobat and Reader | 2022-06-08 | 36.2% | Unknown |
| CVE-2012-5054 | Adobe Flash Player | 2022-06-08 | 21.1% | Unknown |
| CVE-2012-0767 | Adobe Flash Player | 2022-06-08 | 6.1% | Unknown |
| CVE-2012-0754 | Adobe Flash Player | 2022-06-08 | 91.0% | Unknown |
| CVE-2011-2462 | Adobe Reader and Acrobat | 2022-06-08 | 88.8% | Unknown |
| CVE-2011-0609 | Adobe Flash Player | 2022-06-08 | 63.5% | Unknown |
| CVE-2010-2883 | Adobe Acrobat and Reader | 2022-06-08 | 81.3% | Unknown |
| CVE-2010-1297 | Adobe Flash Player | 2022-06-08 | 82.5% | Unknown |
| CVE-2009-4324 | Adobe Acrobat and Reader | 2022-06-08 | 81.8% | Unknown |
| CVE-2009-3953 | Adobe Acrobat and Reader | 2022-06-08 | 83.2% | Unknown |
| CVE-2009-1862 | Adobe Acrobat and Reader, Flash Player | 2022-06-08 | 21.1% | Unknown |
| CVE-2008-0655 | Adobe Acrobat and Reader | 2022-06-08 | 37.8% | Unknown |
| CVE-2007-5659 | Adobe Acrobat and Reader | 2022-06-08 | 87.4% | Unknown |
| CVE-2016-1010 | Adobe Flash Player and AIR | 2022-05-25 | 19.3% | Unknown |
| CVE-2016-0984 | Adobe Flash Player and AIR | 2022-05-25 | 54.5% | Unknown |
| CVE-2015-8651 | Adobe Flash Player | 2022-05-25 | 67.6% | Unknown |
| CVE-2015-0310 | Adobe Flash Player | 2022-05-25 | 15.0% | Unknown |
| CVE-2014-8439 | Adobe Flash Player | 2022-05-25 | 20.3% | Unknown |
| CVE-2014-0546 | Adobe Reader and Acrobat | 2022-05-25 | 22.3% | Unknown |
| CVE-2018-5002 | Adobe Flash Player | 2022-05-23 | 25.0% | Unknown |
| CVE-2015-5123 | Adobe Flash Player | 2022-04-13 | 18.8% | Unknown |
| CVE-2015-5122 | Adobe Flash Player | 2022-04-13 | 93.9% | Unknown |
| CVE-2015-3113 | Adobe Flash Player | 2022-04-13 | 99.8% | Unknown |
| CVE-2015-0313 | Adobe Flash Player | 2022-04-13 | 95.2% | Unknown |
| CVE-2015-0311 | Adobe Flash Player | 2022-04-13 | 85.5% | Unknown |
| CVE-2014-9163 | Adobe Flash Player | 2022-04-13 | 20.7% | Unknown |
| CVE-2013-2729 | Adobe Reader and Acrobat | 2022-03-28 | 66.5% | Unknown |
| CVE-2012-2034 | Adobe Flash Player | 2022-03-28 | 7.8% | Unknown |
| CVE-2016-7892 | Adobe Flash Player | 2022-03-25 | 18.7% | Unknown |
| CVE-2016-4171 | Adobe Flash Player | 2022-03-25 | 20.0% | Unknown |
| CVE-2010-2861 | Adobe ColdFusion | 2022-03-25 | 99.7% | Known |
| CVE-2009-0927 | Adobe Reader and Acrobat | 2022-03-25 | 96.6% | Unknown |
| CVE-2013-0631 | Adobe ColdFusion | 2022-03-07 | 66.4% | Unknown |
| CVE-2013-0629 | Adobe ColdFusion | 2022-03-07 | 65.7% | Unknown |
| CVE-2013-0625 | Adobe ColdFusion | 2022-03-07 | 93.7% | Unknown |
| CVE-2009-3960 | Adobe BlazeDS | 2022-03-07 | 90.1% | Known |
| CVE-2017-11292 | Adobe Flash Player | 2022-03-03 | 11.8% | Unknown |
| CVE-2016-7855 | Adobe Flash Player | 2022-03-03 | 25.1% | Unknown |
| CVE-2016-4117 | Adobe Flash Player | 2022-03-03 | 94.3% | Known |
| CVE-2016-1019 | Adobe Flash Player | 2022-03-03 | 22.3% | Known |
| CVE-2015-7645 | Adobe Flash Player | 2022-03-03 | 65.3% | Known |
| CVE-2015-5119 | Adobe Flash Player | 2022-03-03 | 99.3% | Unknown |
| CVE-2015-3043 | Adobe Flash Player | 2022-03-03 | 73.8% | Unknown |
| CVE-2014-0496 | Adobe Reader and Acrobat | 2022-03-03 | 39.9% | Unknown |
| CVE-2013-3346 | Adobe Reader and Acrobat | 2022-03-03 | 78.9% | Unknown |
| CVE-2013-0641 | Adobe Reader | 2022-03-03 | 32.3% | Unknown |
| CVE-2013-0640 | Adobe Reader and Acrobat | 2022-03-03 | 86.9% | Unknown |
| CVE-2013-0632 | Adobe ColdFusion | 2022-03-03 | 93.6% | Unknown |
| CVE-2012-1535 | Adobe Flash Player | 2022-03-03 | 70.3% | Unknown |
| CVE-2011-0611 | Adobe Flash Player | 2022-03-03 | 99.4% | Unknown |
| CVE-2010-0188 | Adobe Reader and Acrobat | 2022-03-03 | 88.2% | Known |
| CVE-2008-2992 | Adobe Acrobat and Reader | 2022-03-03 | 98.4% | Known |
| CVE-2022-24086 | Adobe Commerce and Magento Open Source | 2022-02-15 | 99.1% | Unknown |
| CVE-2018-15982 | Adobe Flash Player | 2022-02-15 | 89.5% | Known |
| CVE-2021-28550 | Adobe Acrobat and Reader | 2021-11-03 | 51.8% | Unknown |
| CVE-2021-21017 | Adobe Acrobat and Reader | 2021-11-03 | 86.3% | Unknown |
| CVE-2018-4939 | Adobe ColdFusion | 2021-11-03 | 61.9% | Unknown |
| CVE-2018-4878 | Adobe Flash Player | 2021-11-03 | 89.5% | Known |
| CVE-2018-15961 | Adobe ColdFusion | 2021-11-03 | 99.9% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
CISA KEV lists 82 Adobe vulnerabilities (No. 4 of 288 vendors).