Adobe vulnerabilities

CVEs per yearBy the year they were published

1. 2018121
2. 2019461
3. 2020348
4. 2021432
5. 2022460
6. 2023681
7. 2024753
8. 2025829
9. 20261,024

Known exploitedNewest addition to KEV first

• CVE-2026-48356

  Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)

  Adobe · Adobe Commerce

  ExploitedCritical9.3
• CVE-2026-71362

  Adobe Commerce | Incorrect Authorization (CWE-863)

  Adobe · Adobe Commerce

  ExploitedCritical9.1
• CVE-2026-75650

  Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

  Adobe · Adobe Commerce

  ExploitedCritical10.0
• CVE-2026-48282

  ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

  Adobe · ColdFusion 2025

  ExploitedCritical10.0
• CVE-2026-34621

  Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)

  Adobe · Acrobat DC

  ExploitedHigh8.6
• CVE-2020-9715

  Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free…

  Adobe · Adobe Acrobat and Reader

  ExploitedHigh7.8
• CVE-2025-54236

  Adobe Commerce | Improper Input Validation (CWE-20)

  Adobe · Adobe Commerce

  ExploitedCritical9.1
• CVE-2025-54253

  Adobe Experience Manager | Incorrect Authorization (CWE-863)

  Adobe · Adobe Experience Manager

  ExploitedCritical10.0
• CVE-2024-20767

  ColdFusion | Improper Access Control (CWE-284)

  Adobe · ColdFusion

  ExploitedHigh7.4
• CVE-2024-34102

  XXE can expose crypt key and other secrets granting full admin access

  Adobe · Adobe Commerce

  ExploitedCritical9.8

Newest CVEs

• CVE-2020-9709

  Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have a security bypass vulnerability. Successful exploitation could lead to privilege escalation.

  Adobe · Adobe Photoshop

  Not scored
• CVE-2019-16447

  Adobe Illustrator CC versions 23.1 and earlier have a binary planting vulnerability. Successful exploitation could lead to local code execution.

  Adobe · Adobe Illustrator CC

  High7.8
• CVE-2026-113576

  Adobe Digital Editions | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

  Adobe · Adobe Digital Editions

  Medium6.3
• CVE-2026-104353

  Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

  Adobe · Adobe Campaign Classic

  Critical9.9
• CVE-2026-105780

  Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)

  Adobe · Adobe Campaign Classic

  Critical9.9
• CVE-2026-105489

  Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

  Adobe · Adobe Campaign Classic

  Critical9.9
• CVE-2026-104350

  Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)

  Adobe · Adobe Campaign Classic

  Critical9.3
• CVE-2026-105781

  Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

  Adobe · Adobe Campaign Classic

  Critical10.0
• CVE-2026-104351

  Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)

  Adobe · Adobe Campaign Classic

  Critical9.9
• CVE-2026-104354

  Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

  Adobe · Adobe Campaign Classic

  Critical9.1