# Adobe vulnerabilities > Adobe has 6,632 published vulnerabilities across 342 products in our catalogue. 79 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Acrobat Reader Dc, with 1,761. If you run Adobe software, patch the exploited flaws first. Canonical page: https://www.precursorintelligence.com/vendors/adobe ## At a glance - **Published vulnerabilities:** 6,632 - **Known to be exploited:** 79 - **Products:** 342 - **Versions:** 4,434 - **Most recently added to the known-exploited list:** [CVE-2026-48282](https://www.precursorintelligence.com/what-is/cve-2026-48282), 7 July 2026. We keep watching the list. ## Which Adobe products have the most vulnerabilities? - [Acrobat Reader Dc](https://www.precursorintelligence.com/product/adobe/acrobat_reader_dc): 1,761 published vulnerabilities, 233 versions - [Acrobat Dc](https://www.precursorintelligence.com/product/adobe/acrobat_dc): 1,761 published vulnerabilities, 235 versions - [Acrobat](https://www.precursorintelligence.com/product/adobe/acrobat): 1,339 published vulnerabilities, 253 versions - [Flash Player](https://www.precursorintelligence.com/product/adobe/flash_player): 1,084 published vulnerabilities, 435 versions - [Acrobat Reader](https://www.precursorintelligence.com/product/adobe/acrobat_reader): 1,067 published vulnerabilities, 230 versions - [Experience Manager](https://www.precursorintelligence.com/product/adobe/experience_manager): 925 published vulnerabilities, 157 versions - [Air](https://www.precursorintelligence.com/product/adobe/air): 413 published vulnerabilities, 42 versions - [Air SDK](https://www.precursorintelligence.com/product/adobe/air_sdk): 409 published vulnerabilities, 27 versions - Air SDK & Compiler: 365 published vulnerabilities, 20 versions - [Reader](https://www.precursorintelligence.com/product/adobe/reader): 360 published vulnerabilities, 93 versions Each product page lists its own known-exploited flaws. ## Which Adobe vulnerabilities are being exploited? 79 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2026-48282](https://www.precursorintelligence.com/what-is/cve-2026-48282): Adobe ColdFusion Path Traversal Vulnerability. Critical, CVSS 10.0, chance of use in 30 days 42%, known exploited since 7 July 2026. - [CVE-2009-3459](https://www.precursorintelligence.com/what-is/cve-2009-3459): Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability. High, CVSS 8.8, chance of use in 30 days 87%, known exploited since 20 May 2026. - [CVE-2020-9715](https://www.precursorintelligence.com/what-is/cve-2020-9715): Adobe Acrobat Use-After-Free Vulnerability. High, CVSS 7.8, chance of use in 30 days 49%, known exploited since 13 April 2026. - [CVE-2025-54236](https://www.precursorintelligence.com/what-is/cve-2025-54236): Adobe Commerce and Magento Improper Input Validation Vulnerability. Critical, CVSS 9.1, chance of use in 30 days 95%, known exploited since 24 October 2025. - [CVE-2025-54253](https://www.precursorintelligence.com/what-is/cve-2025-54253): Adobe Experience Manager Forms Code Execution Vulnerability. Critical, CVSS 10.0, chance of use in 30 days 88%, known exploited since 15 October 2025. - [CVE-2017-3066](https://www.precursorintelligence.com/what-is/cve-2017-3066): Adobe ColdFusion Deserialization Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 91%, known exploited since 24 February 2025. - [CVE-2024-20767](https://www.precursorintelligence.com/what-is/cve-2024-20767): Adobe ColdFusion Improper Access Control Vulnerability. High, CVSS 7.4, chance of use in 30 days 99%, known exploited since 16 December 2024. - [CVE-2014-0497](https://www.precursorintelligence.com/what-is/cve-2014-0497): Adobe Flash Player Integer Underflow Vulnerablity. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 17 September 2024. - [CVE-2013-0648](https://www.precursorintelligence.com/what-is/cve-2013-0648): Adobe Flash Player Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 11%, known exploited since 17 September 2024. - [CVE-2014-0502](https://www.precursorintelligence.com/what-is/cve-2014-0502): Adobe Flash Player Double Free Vulnerablity. High, CVSS 8.8, chance of use in 30 days 25%, known exploited since 17 September 2024. - [CVE-2013-0643](https://www.precursorintelligence.com/what-is/cve-2013-0643): Adobe Flash Player Incorrect Default Permissions Vulnerability. High, CVSS 8.8, chance of use in 30 days 11%, known exploited since 17 September 2024. - [CVE-2024-34102](https://www.precursorintelligence.com/what-is/cve-2024-34102): Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 17 July 2024. - [CVE-2023-38203](https://www.precursorintelligence.com/what-is/cve-2023-38203): Adobe ColdFusion Deserialization of Untrusted Data Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 97%, known exploited since 8 January 2024. - [CVE-2023-29300](https://www.precursorintelligence.com/what-is/cve-2023-29300): Adobe ColdFusion Deserialization of Untrusted Data Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 8 January 2024. - [CVE-2023-21608](https://www.precursorintelligence.com/what-is/cve-2023-21608): Adobe Acrobat and Reader Use-After-Free Vulnerability. High, CVSS 7.8, chance of use in 30 days 60%, known exploited since 10 October 2023. - [CVE-2023-26369](https://www.precursorintelligence.com/what-is/cve-2023-26369): Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability. High, CVSS 7.8, chance of use in 30 days 6.7%, known exploited since 14 September 2023. - [CVE-2023-26359](https://www.precursorintelligence.com/what-is/cve-2023-26359): Adobe ColdFusion Deserialization of Untrusted Data Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 17%, known exploited since 21 August 2023. - [CVE-2023-38205](https://www.precursorintelligence.com/what-is/cve-2023-38205): Adobe ColdFusion Improper Access Control Vulnerability. High, CVSS 7.5, chance of use in 30 days >99%, known exploited since 20 July 2023. - [CVE-2023-29298](https://www.precursorintelligence.com/what-is/cve-2023-29298): Adobe ColdFusion Improper Access Control Vulnerability. High, CVSS 7.5, chance of use in 30 days >99%, known exploited since 20 July 2023. - [CVE-2023-26360](https://www.precursorintelligence.com/what-is/cve-2023-26360): Adobe ColdFusion Deserialization of Untrusted Data Vulnerability. High, CVSS 8.6, chance of use in 30 days 97%, known exploited since 15 March 2023. - [CVE-2011-2462](https://www.precursorintelligence.com/what-is/cve-2011-2462): Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 89%, known exploited since 8 June 2022. - [CVE-2008-0655](https://www.precursorintelligence.com/what-is/cve-2008-0655): Adobe Acrobat and Reader Unspecified Vulnerability. High, CVSS 8.8, chance of use in 30 days 38%, known exploited since 8 June 2022. - [CVE-2018-4990](https://www.precursorintelligence.com/what-is/cve-2018-4990): Adobe Acrobat and Reader Double Free Vulnerability. High, CVSS 8.8, chance of use in 30 days 36%, known exploited since 8 June 2022. - [CVE-2012-5054](https://www.precursorintelligence.com/what-is/cve-2012-5054): Adobe Flash Player Integer Overflow Vulnerability. High, CVSS 8.8, chance of use in 30 days 21%, known exploited since 8 June 2022. - [CVE-2009-3953](https://www.precursorintelligence.com/what-is/cve-2009-3953): Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 83%, known exploited since 8 June 2022. - [CVE-2012-0754](https://www.precursorintelligence.com/what-is/cve-2012-0754): Adobe Flash Player Memory Corruption Vulnerability. High, CVSS 8.1, chance of use in 30 days 91%, known exploited since 8 June 2022. - [CVE-2009-1862](https://www.precursorintelligence.com/what-is/cve-2009-1862): Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability. High, CVSS 7.8, chance of use in 30 days 21%, known exploited since 8 June 2022. - [CVE-2009-4324](https://www.precursorintelligence.com/what-is/cve-2009-4324): Adobe Acrobat and Reader Use-After-Free Vulnerability. High, CVSS 7.8, chance of use in 30 days 82%, known exploited since 8 June 2022. - [CVE-2010-1297](https://www.precursorintelligence.com/what-is/cve-2010-1297): Adobe Flash Player Memory Corruption Vulnerability. High, CVSS 7.8, chance of use in 30 days 83%, known exploited since 8 June 2022. - [CVE-2007-5659](https://www.precursorintelligence.com/what-is/cve-2007-5659): Adobe Acrobat and Reader Buffer Overflow Vulnerability. High, CVSS 7.8, chance of use in 30 days 87%, known exploited since 8 June 2022. - [CVE-2011-0609](https://www.precursorintelligence.com/what-is/cve-2011-0609): Adobe Flash Player Unspecified Vulnerability. High, CVSS 7.8, chance of use in 30 days 64%, known exploited since 8 June 2022. - [CVE-2010-2883](https://www.precursorintelligence.com/what-is/cve-2010-2883): Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability. High, CVSS 7.3, chance of use in 30 days 81%, known exploited since 8 June 2022. - [CVE-2012-0767](https://www.precursorintelligence.com/what-is/cve-2012-0767): Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability. Medium, CVSS 6.1, chance of use in 30 days 6.2%, known exploited since 8 June 2022. - [CVE-2014-0546](https://www.precursorintelligence.com/what-is/cve-2014-0546): Adobe Reader and Acrobat Sandbox Bypass Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 22%, known exploited since 25 May 2022. - [CVE-2015-0310](https://www.precursorintelligence.com/what-is/cve-2015-0310): Adobe Flash Player ASLR Bypass Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 15%, known exploited since 25 May 2022. - [CVE-2014-8439](https://www.precursorintelligence.com/what-is/cve-2014-8439): Adobe Flash Player Dereferenced Pointer Vulnerability. High, CVSS 8.8, chance of use in 30 days 20%, known exploited since 25 May 2022. - [CVE-2016-1010](https://www.precursorintelligence.com/what-is/cve-2016-1010): Adobe Flash Player and AIR Integer Overflow Vulnerability. High, CVSS 8.8, chance of use in 30 days 19%, known exploited since 25 May 2022. - [CVE-2015-8651](https://www.precursorintelligence.com/what-is/cve-2015-8651): Adobe Flash Player Integer Overflow Vulnerability. High, CVSS 8.8, chance of use in 30 days 68%, known exploited since 25 May 2022. - [CVE-2016-0984](https://www.precursorintelligence.com/what-is/cve-2016-0984): Adobe Flash Player and AIR Use-After-Free Vulnerability. High, CVSS 8.8, chance of use in 30 days 55%, known exploited since 25 May 2022. - [CVE-2018-5002](https://www.precursorintelligence.com/what-is/cve-2018-5002): Adobe Flash Player Stack-based Buffer Overflow Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 25%, known exploited since 23 May 2022. - [CVE-2014-9163](https://www.precursorintelligence.com/what-is/cve-2014-9163): Adobe Flash Player Stack-Based Buffer Overflow Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 21%, known exploited since 13 April 2022. - [CVE-2015-5122](https://www.precursorintelligence.com/what-is/cve-2015-5122): Adobe Flash Player Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 94%, known exploited since 13 April 2022. - [CVE-2015-5123](https://www.precursorintelligence.com/what-is/cve-2015-5123): Adobe Flash Player Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 19%, known exploited since 13 April 2022. - [CVE-2015-3113](https://www.precursorintelligence.com/what-is/cve-2015-3113): Adobe Flash Player Heap-Based Buffer Overflow Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 13 April 2022. - [CVE-2015-0313](https://www.precursorintelligence.com/what-is/cve-2015-0313): Adobe Flash Player Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 95%, known exploited since 13 April 2022. - [CVE-2015-0311](https://www.precursorintelligence.com/what-is/cve-2015-0311): Adobe Flash Player Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 86%, known exploited since 13 April 2022. - [CVE-2013-2729](https://www.precursorintelligence.com/what-is/cve-2013-2729): Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 67%, known exploited since 28 March 2022. - [CVE-2012-2034](https://www.precursorintelligence.com/what-is/cve-2012-2034): Adobe Flash Player Memory Corruption Vulnerability. High, CVSS 7.5, chance of use in 30 days 7.7%, known exploited since 28 March 2022. - [CVE-2016-4171](https://www.precursorintelligence.com/what-is/cve-2016-4171): Adobe Flash Player Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 20%, known exploited since 25 March 2022. - [CVE-2010-2861](https://www.precursorintelligence.com/what-is/cve-2010-2861): Adobe ColdFusion Directory Traversal Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 25 March 2022. - [CVE-2009-0927](https://www.precursorintelligence.com/what-is/cve-2009-0927): Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability. High, CVSS 8.8, chance of use in 30 days 97%, known exploited since 25 March 2022. - [CVE-2016-7892](https://www.precursorintelligence.com/what-is/cve-2016-7892): Adobe Flash Player Use-After-Free Vulnerability. High, CVSS 8.8, chance of use in 30 days 19%, known exploited since 25 March 2022. - [CVE-2013-0625](https://www.precursorintelligence.com/what-is/cve-2013-0625): Adobe ColdFusion Authentication Bypass Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 94%, known exploited since 7 March 2022. - [CVE-2013-0629](https://www.precursorintelligence.com/what-is/cve-2013-0629): Adobe ColdFusion Directory Traversal Vulnerability. High, CVSS 7.5, chance of use in 30 days 66%, known exploited since 7 March 2022. - [CVE-2013-0631](https://www.precursorintelligence.com/what-is/cve-2013-0631): Adobe ColdFusion Information Disclosure Vulnerability. High, CVSS 7.5, chance of use in 30 days 66%, known exploited since 7 March 2022. - [CVE-2009-3960](https://www.precursorintelligence.com/what-is/cve-2009-3960): Adobe BlazeDS Information Disclosure Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 90%, known exploited since 7 March 2022. - [CVE-2013-0632](https://www.precursorintelligence.com/what-is/cve-2013-0632): Adobe ColdFusion Authentication Bypass Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 94%, known exploited since 3 March 2022. - [CVE-2016-4117](https://www.precursorintelligence.com/what-is/cve-2016-4117): Adobe Flash Player Arbitrary Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 94%, known exploited since 3 March 2022. - [CVE-2016-1019](https://www.precursorintelligence.com/what-is/cve-2016-1019): Adobe Flash Player Arbitrary Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 22%, known exploited since 3 March 2022. - [CVE-2014-0496](https://www.precursorintelligence.com/what-is/cve-2014-0496): Adobe Reader and Acrobat Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 40%, known exploited since 3 March 2022. - [CVE-2015-5119](https://www.precursorintelligence.com/what-is/cve-2015-5119): Adobe Flash Player Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 3 March 2022. - [CVE-2013-3346](https://www.precursorintelligence.com/what-is/cve-2013-3346): Adobe Reader and Acrobat Memory Corruption Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 79%, known exploited since 3 March 2022. - [CVE-2015-3043](https://www.precursorintelligence.com/what-is/cve-2015-3043): Adobe Flash Player Memory Corruption Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 74%, known exploited since 3 March 2022. - [CVE-2016-7855](https://www.precursorintelligence.com/what-is/cve-2016-7855): Adobe Flash Player Use-After-Free Vulnerability. High, CVSS 8.8, chance of use in 30 days 25%, known exploited since 3 March 2022. - [CVE-2011-0611](https://www.precursorintelligence.com/what-is/cve-2011-0611): Adobe Flash Player Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days >99%, known exploited since 3 March 2022. - [CVE-2017-11292](https://www.precursorintelligence.com/what-is/cve-2017-11292): Adobe Flash Player Type Confusion Vulnerability. High, CVSS 8.8, chance of use in 30 days 12%, known exploited since 3 March 2022. - [CVE-2010-0188](https://www.precursorintelligence.com/what-is/cve-2010-0188): Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability. High, CVSS 7.8, chance of use in 30 days 88%, known exploited since 3 March 2022. - [CVE-2008-2992](https://www.precursorintelligence.com/what-is/cve-2008-2992): Adobe Reader and Acrobat Input Validation Vulnerability. High, CVSS 7.8, chance of use in 30 days 98%, known exploited since 3 March 2022. - [CVE-2015-7645](https://www.precursorintelligence.com/what-is/cve-2015-7645): Adobe Flash Player Arbitrary Code Execution Vulnerability. High, CVSS 7.8, chance of use in 30 days 65%, known exploited since 3 March 2022. - [CVE-2013-0641](https://www.precursorintelligence.com/what-is/cve-2013-0641): Adobe Reader Buffer Overflow Vulnerability. High, CVSS 7.8, chance of use in 30 days 32%, known exploited since 3 March 2022. - [CVE-2013-0640](https://www.precursorintelligence.com/what-is/cve-2013-0640): Adobe Reader and Acrobat Memory Corruption Vulnerability. High, CVSS 7.8, chance of use in 30 days 87%, known exploited since 3 March 2022. - [CVE-2012-1535](https://www.precursorintelligence.com/what-is/cve-2012-1535): Adobe Flash Player Arbitrary Code Execution Vulnerability. High, CVSS 7.8, chance of use in 30 days 70%, known exploited since 3 March 2022. - [CVE-2022-24086](https://www.precursorintelligence.com/what-is/cve-2022-24086): Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 15 February 2022. - [CVE-2018-15982](https://www.precursorintelligence.com/what-is/cve-2018-15982): Adobe Flash Player Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 90%, known exploited since 15 February 2022. - [CVE-2018-4878](https://www.precursorintelligence.com/what-is/cve-2018-4878): Adobe Flash Player Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 90%, known exploited since 3 November 2021. - [CVE-2018-15961](https://www.precursorintelligence.com/what-is/cve-2018-15961): Adobe ColdFusion Unrestricted File Upload Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 3 November 2021. - [CVE-2018-4939](https://www.precursorintelligence.com/what-is/cve-2018-4939): Adobe ColdFusion Deserialization of Untrusted Data Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 62%, known exploited since 3 November 2021. - [CVE-2021-21017](https://www.precursorintelligence.com/what-is/cve-2021-21017): Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability. High, CVSS 8.8, chance of use in 30 days 86%, known exploited since 3 November 2021. - [CVE-2021-28550](https://www.precursorintelligence.com/what-is/cve-2021-28550): Adobe Acrobat and Reader Use-After-Free Vulnerability. High, CVSS 8.8, chance of use in 30 days 52%, known exploited since 3 November 2021. ## All Adobe products we track 318 products with at least one tracked version, most vulnerabilities first (the top 150 here; every product is on the page): - [Acrobat Reader Dc](https://www.precursorintelligence.com/product/adobe/acrobat_reader_dc): 1,761 vulnerabilities, 233 versions - [Acrobat Dc](https://www.precursorintelligence.com/product/adobe/acrobat_dc): 1,761 vulnerabilities, 235 versions - [Acrobat](https://www.precursorintelligence.com/product/adobe/acrobat): 1,339 vulnerabilities, 253 versions - [Flash Player](https://www.precursorintelligence.com/product/adobe/flash_player): 1,084 vulnerabilities, 435 versions - [Acrobat Reader](https://www.precursorintelligence.com/product/adobe/acrobat_reader): 1,067 vulnerabilities, 230 versions - [Experience Manager](https://www.precursorintelligence.com/product/adobe/experience_manager): 925 vulnerabilities, 157 versions - [Air](https://www.precursorintelligence.com/product/adobe/air): 413 vulnerabilities, 42 versions - [Air SDK](https://www.precursorintelligence.com/product/adobe/air_sdk): 409 vulnerabilities, 27 versions - Air SDK & Compiler: 365 vulnerabilities, 20 versions - [Reader](https://www.precursorintelligence.com/product/adobe/reader): 360 vulnerabilities, 93 versions - [Flash Player Desktop Runtime](https://www.precursorintelligence.com/product/adobe/flash_player_desktop_runtime): 294 vulnerabilities, 36 versions - [Experience Manager Cloud Service](https://www.precursorintelligence.com/product/adobe/experience_manager_cloud_service): 183 vulnerabilities, 3 versions - [Coldfusion](https://www.precursorintelligence.com/product/adobe/coldfusion): 177 vulnerabilities, 24 versions - [Shockwave Player](https://www.precursorintelligence.com/product/adobe/shockwave_player): 174 vulnerabilities, 77 versions - [Indesign](https://www.precursorintelligence.com/product/adobe/indesign): 163 vulnerabilities, 75 versions - [Adobe Air](https://www.precursorintelligence.com/product/adobe/adobe_air): 146 vulnerabilities, 65 versions - [Illustrator](https://www.precursorintelligence.com/product/adobe/illustrator): 146 vulnerabilities, 84 versions - [Commerce](https://www.precursorintelligence.com/product/adobe/commerce): 141 vulnerabilities, 17 versions - [Bridge](https://www.precursorintelligence.com/product/adobe/bridge): 127 vulnerabilities, 44 versions - [Magento](https://www.precursorintelligence.com/product/adobe/magento): 118 vulnerabilities, 18 versions - [Dimension](https://www.precursorintelligence.com/product/adobe/dimension): 114 vulnerabilities, 16 versions - [After Effects](https://www.precursorintelligence.com/product/adobe/after_effects): 104 vulnerabilities, 42 versions - [Animate](https://www.precursorintelligence.com/product/adobe/animate): 102 vulnerabilities, 39 versions - [Adobe Air SDK](https://www.precursorintelligence.com/product/adobe/adobe_air_sdk): 96 vulnerabilities, 29 versions - [Framemaker](https://www.precursorintelligence.com/product/adobe/framemaker): 92 vulnerabilities, 59 versions - [Photoshop](https://www.precursorintelligence.com/product/adobe/photoshop): 90 vulnerabilities, 82 versions - [Air Desktop Runtime](https://www.precursorintelligence.com/product/adobe/air_desktop_runtime): 88 vulnerabilities, 2 versions - [Photoshop CC](https://www.precursorintelligence.com/product/adobe/photoshop_cc): 77 vulnerabilities, 37 versions - [Digital Editions](https://www.precursorintelligence.com/product/adobe/digital_editions): 71 vulnerabilities, 28 versions - [Substance 3d Stager](https://www.precursorintelligence.com/product/adobe/substance_3d_stager): 69 vulnerabilities, 12 versions - [Connect](https://www.precursorintelligence.com/product/adobe/connect): 67 vulnerabilities, 86 versions - [Commerce B2b](https://www.precursorintelligence.com/product/adobe/commerce_b2b): 66 vulnerabilities, 14 versions - [Substance 3d Painter](https://www.precursorintelligence.com/product/adobe/substance_3d_painter): 65 vulnerabilities, 137 versions - [Media Encoder](https://www.precursorintelligence.com/product/adobe/media_encoder): 58 vulnerabilities, 36 versions - [Incopy](https://www.precursorintelligence.com/product/adobe/incopy): 50 vulnerabilities, 18 versions - [Audition](https://www.precursorintelligence.com/product/adobe/audition): 35 vulnerabilities, 15 versions - [Flash Player for Android](https://www.precursorintelligence.com/product/adobe/flash_player_for_android): 35 vulnerabilities, 32 versions - [Premiere Pro](https://www.precursorintelligence.com/product/adobe/premiere_pro): 35 vulnerabilities, 17 versions - [Substance 3d Modeler](https://www.precursorintelligence.com/product/adobe/substance_3d_modeler): 32 vulnerabilities, 38 versions - [Magento Open Source](https://www.precursorintelligence.com/product/adobe/magento_open_source): 32 vulnerabilities, 7 versions - [Xmp Toolkit Software Development Kit](https://www.precursorintelligence.com/product/adobe/xmp_toolkit_software_development_kit): 28 vulnerabilities, 9 versions - [Photoshop 2020](https://www.precursorintelligence.com/product/adobe/photoshop_2020): 24 vulnerabilities, 2 versions - [Premiere Rush](https://www.precursorintelligence.com/product/adobe/premiere_rush): 23 vulnerabilities, 4 versions - [Creative Cloud](https://www.precursorintelligence.com/product/adobe/creative_cloud): 23 vulnerabilities, 69 versions - [Substance 3d Designer](https://www.precursorintelligence.com/product/adobe/substance_3d_designer): 23 vulnerabilities, 103 versions - [Adobe Commerce](https://www.precursorintelligence.com/product/adobe/adobe_commerce): 23 vulnerabilities, 1 version - [Substance 3d Sampler](https://www.precursorintelligence.com/product/adobe/substance_3d_sampler): 22 vulnerabilities, 9 versions - [Flash Player for Linux](https://www.precursorintelligence.com/product/adobe/flash_player_for_linux): 21 vulnerabilities, 14 versions - [Prelude](https://www.precursorintelligence.com/product/adobe/prelude): 20 vulnerabilities, 5 versions - [Robohelp Server](https://www.precursorintelligence.com/product/adobe/robohelp_server): 17 vulnerabilities, 7 versions - [Robohelp](https://www.precursorintelligence.com/product/adobe/robohelp): 16 vulnerabilities, 51 versions - [Character Animator](https://www.precursorintelligence.com/product/adobe/character_animator): 15 vulnerabilities, 7 versions - [Flex](https://www.precursorintelligence.com/product/adobe/flex): 15 vulnerabilities, 2 versions - [Bridge CC](https://www.precursorintelligence.com/product/adobe/bridge_cc): 14 vulnerabilities, 7 versions - [Premiere Elements](https://www.precursorintelligence.com/product/adobe/premiere_elements): 14 vulnerabilities, 11 versions - [Creative Cloud Desktop Application](https://www.precursorintelligence.com/product/adobe/creative_cloud_desktop_application): 14 vulnerabilities, 8 versions - [Flash Media Server](https://www.precursorintelligence.com/product/adobe/flash_media_server): 13 vulnerabilities, 23 versions - [Dreamweaver](https://www.precursorintelligence.com/product/adobe/dreamweaver): 12 vulnerabilities, 29 versions - [Campaign](https://www.precursorintelligence.com/product/adobe/campaign): 11 vulnerabilities, 17 versions - [Commerce Webhooks](https://www.precursorintelligence.com/product/adobe/commerce_webhooks): 10 vulnerabilities, 8 versions - [Substance 3d Viewer](https://www.precursorintelligence.com/product/adobe/substance_3d_viewer): 9 vulnerabilities, 11 versions - [Digital Negative Software Development Kit](https://www.precursorintelligence.com/product/adobe/digital_negative_software_development_kit): 9 vulnerabilities, 2 versions - [Illustrator CC](https://www.precursorintelligence.com/product/adobe/illustrator_cc): 8 vulnerabilities, 1 version - [Phonegap](https://www.precursorintelligence.com/product/adobe/phonegap): 8 vulnerabilities, 11 versions - [Experience Manager Forms](https://www.precursorintelligence.com/product/adobe/experience_manager_forms): 8 vulnerabilities, 30 versions - [Flash Media Server 2](https://www.precursorintelligence.com/product/adobe/flash_media_server_2): 7 vulnerabilities, 1 version - [Download Manager](https://www.precursorintelligence.com/product/adobe/download_manager): 7 vulnerabilities, 19 versions - [Lightroom](https://www.precursorintelligence.com/product/adobe/lightroom): 7 vulnerabilities, 38 versions - [Captivate](https://www.precursorintelligence.com/product/adobe/captivate): 6 vulnerabilities, 6 versions - [Pagemaker](https://www.precursorintelligence.com/product/adobe/pagemaker): 5 vulnerabilities, 4 versions - [Livecycle Data Services](https://www.precursorintelligence.com/product/adobe/livecycle_data_services): 5 vulnerabilities, 9 versions - [Livecycle](https://www.precursorintelligence.com/product/adobe/livecycle): 5 vulnerabilities, 10 versions - [Genuine Service](https://www.precursorintelligence.com/product/adobe/genuine_service): 5 vulnerabilities, 2 versions - [Jrun](https://www.precursorintelligence.com/product/adobe/jrun): 5 vulnerabilities, 2 versions - [Photoshop Elements](https://www.precursorintelligence.com/product/adobe/photoshop_elements): 5 vulnerabilities, 25 versions - [Document Server](https://www.precursorintelligence.com/product/adobe/document_server): 5 vulnerabilities, 2 versions - [Dng Software Development Kit](https://www.precursorintelligence.com/product/adobe/dng_software_development_kit): 4 vulnerabilities, 3 versions - [Creative Suite](https://www.precursorintelligence.com/product/adobe/creative_suite): 4 vulnerabilities, 6 versions - [Acrobat 3d](https://www.precursorintelligence.com/product/adobe/acrobat_3d): 4 vulnerabilities, 14 versions - [Acrobat Reader 2017](https://www.precursorintelligence.com/product/adobe/acrobat_reader_2017): 4 vulnerabilities, 2 versions - [Photoshop Cs4](https://www.precursorintelligence.com/product/adobe/photoshop_cs4): 4 vulnerabilities, 1 version - [Acrobat 2017](https://www.precursorintelligence.com/product/adobe/acrobat_2017): 4 vulnerabilities, 2 versions - [Version Cue](https://www.precursorintelligence.com/product/adobe/version_cue): 4 vulnerabilities, 3 versions - [Framemaker Publishing Server](https://www.precursorintelligence.com/product/adobe/framemaker_publishing_server): 4 vulnerabilities, 2 versions - [Connect Enterprise Server](https://www.precursorintelligence.com/product/adobe/connect_enterprise_server): 4 vulnerabilities, 1 version - [Blazeds](https://www.precursorintelligence.com/product/adobe/blazeds): 3 vulnerabilities, 1 version - [Brackets](https://www.precursorintelligence.com/product/adobe/brackets): 3 vulnerabilities, 2 versions - [Flex SDK](https://www.precursorintelligence.com/product/adobe/flex_sdk): 3 vulnerabilities, 16 versions - [Photoshop Cs5.5](https://www.precursorintelligence.com/product/adobe/photoshop_cs5.5): 3 vulnerabilities, 5 versions - [Adobe Content Server](https://www.precursorintelligence.com/product/adobe/adobe_content_server): 3 vulnerabilities, 1 version - [Photoshop Cs6](https://www.precursorintelligence.com/product/adobe/photoshop_cs6): 2 vulnerabilities, 2 versions - [Campaign Classic](https://www.precursorintelligence.com/product/adobe/campaign_classic): 2 vulnerabilities, 24 versions - [Camera Raw](https://www.precursorintelligence.com/product/adobe/camera_raw): 2 vulnerabilities, 24 versions - [Contribute](https://www.precursorintelligence.com/product/adobe/contribute): 2 vulnerabilities, 3 versions - [Css-Tools](https://www.precursorintelligence.com/product/adobe/css-tools): 2 vulnerabilities, 32 versions - [Director](https://www.precursorintelligence.com/product/adobe/director): 2 vulnerabilities, 1 version - [Dng Converter](https://www.precursorintelligence.com/product/adobe/dng_converter): 2 vulnerabilities, 2 versions - [Flash](https://www.precursorintelligence.com/product/adobe/flash): 2 vulnerabilities, 4 versions - [Golive](https://www.precursorintelligence.com/product/adobe/golive): 2 vulnerabilities, 5 versions - [Illustrator on Ipad](https://www.precursorintelligence.com/product/adobe/illustrator_on_ipad): 2 vulnerabilities, 25 versions - [Magento Commerce](https://www.precursorintelligence.com/product/adobe/magento_commerce): 2 vulnerabilities, 5 versions - [Adobe Reader](https://www.precursorintelligence.com/product/adobe/adobe_reader): 2 vulnerabilities, 10 versions - [Premiere](https://www.precursorintelligence.com/product/adobe/premiere): 2 vulnerabilities, 1 version - [Presenter](https://www.precursorintelligence.com/product/adobe/presenter): 2 vulnerabilities, 5 versions - [Stock API Integration](https://www.precursorintelligence.com/product/adobe/stock_api_integration): 2 vulnerabilities, 3 versions - [Xd](https://www.precursorintelligence.com/product/adobe/xd): 2 vulnerabilities, 1 version - [Livecycle Designer](https://www.precursorintelligence.com/product/adobe/livecycle_designer): 1 vulnerability, 1 version - [Livecycle Designer Es2](https://www.precursorintelligence.com/product/adobe/livecycle_designer_es2): 1 vulnerability, 1 version - [Git-Server](https://www.precursorintelligence.com/product/adobe/git-server): 1 vulnerability, 49 versions - [Adobe Consulting Services Commons](https://www.precursorintelligence.com/product/adobe/adobe_consulting_services_commons): 1 vulnerability, 124 versions - [Premiere Pro CC](https://www.precursorintelligence.com/product/adobe/premiere_pro_cc): 1 vulnerability, 1 version - [Premiere Pro Cs4](https://www.precursorintelligence.com/product/adobe/premiere_pro_cs4): 1 vulnerability, 4 versions - [Xmp Toolkit](https://www.precursorintelligence.com/product/adobe/xmp_toolkit): 1 vulnerability, 1 version - [Push Notifications](https://www.precursorintelligence.com/product/adobe/push_notifications): 1 vulnerability, 59 versions - [Livecycle Form Manager](https://www.precursorintelligence.com/product/adobe/livecycle_form_manager): 1 vulnerability, 1 version - [Livecycle Workflow](https://www.precursorintelligence.com/product/adobe/livecycle_workflow): 1 vulnerability, 1 version - [Extension Manager Cs5](https://www.precursorintelligence.com/product/adobe/extension_manager_cs5): 1 vulnerability, 1 version - [Graphics Server](https://www.precursorintelligence.com/product/adobe/graphics_server): 1 vulnerability, 2 versions - [Fireworks](https://www.precursorintelligence.com/product/adobe/fireworks): 1 vulnerability, 1 version - [Aero](https://www.precursorintelligence.com/product/adobe/aero): 1 vulnerability, 1 version - [Experience Manager Forms Add-on](https://www.precursorintelligence.com/product/adobe/experience_manager_forms_add-on): 1 vulnerability, 2 versions - [Shockwave](https://www.precursorintelligence.com/product/adobe/shockwave): 1 vulnerability, 1 version - [Acs Aem Commons](https://www.precursorintelligence.com/product/adobe/acs_aem_commons): 1 vulnerability, 137 versions - [Medium](https://www.precursorintelligence.com/product/adobe/medium): 1 vulnerability, 2 versions - [Analytics Appmeasurement for Flash Library](https://www.precursorintelligence.com/product/adobe/analytics_appmeasurement_for_flash_library): 1 vulnerability, 1 version - [Flash Player Installer](https://www.precursorintelligence.com/product/adobe/flash_player_installer): 1 vulnerability, 1 version - [Onlocation Cs4](https://www.precursorintelligence.com/product/adobe/onlocation_cs4): 1 vulnerability, 3 versions - [Ops-CLI](https://www.precursorintelligence.com/product/adobe/ops-cli): 1 vulnerability, 62 versions - [Extendedscript Toolkit Cs5](https://www.precursorintelligence.com/product/adobe/extendedscript_toolkit_cs5): 1 vulnerability, 1 version - [Breeze Licensed Server](https://www.precursorintelligence.com/product/adobe/breeze_licensed_server): 1 vulnerability, 2 versions - [Flex Builder](https://www.precursorintelligence.com/product/adobe/flex_builder): 1 vulnerability, 2 versions - [Indesign Cs3](https://www.precursorintelligence.com/product/adobe/indesign_cs3): 1 vulnerability, 1 version - [PDF Library SDK](https://www.precursorintelligence.com/product/adobe/pdf_library_sdk): 1 vulnerability, 3 versions - [Studio](https://www.precursorintelligence.com/product/adobe/studio): 1 vulnerability, 1 version - [Web Content Management Core Components](https://www.precursorintelligence.com/product/adobe/web_content_management_core_components): 1 vulnerability, 1 version - [Coldfusion Builder](https://www.precursorintelligence.com/product/adobe/coldfusion_builder): 1 vulnerability, 4 versions - [Indesign Cs4](https://www.precursorintelligence.com/product/adobe/indesign_cs4): 1 vulnerability, 1 version - [Flex Data Services](https://www.precursorintelligence.com/product/adobe/flex_data_services): 1 vulnerability, 1 version - [Flash Cs3](https://www.precursorintelligence.com/product/adobe/flash_cs3): 1 vulnerability, 1 version - [Acrobat Business Tools](https://www.precursorintelligence.com/product/adobe/acrobat_business_tools): 1 vulnerability, 2 versions - [Flash Cs4](https://www.precursorintelligence.com/product/adobe/flash_cs4): 1 vulnerability, 1 version - [Photodeluxe](https://www.precursorintelligence.com/product/adobe/photodeluxe): 1 vulnerability, 3 versions - [Indesign Server](https://www.precursorintelligence.com/product/adobe/indesign_server): 1 vulnerability, 2 versions - [Svg Viewer](https://www.precursorintelligence.com/product/adobe/svg_viewer): 1 vulnerability, 5 versions - [Technical Communications Suite](https://www.precursorintelligence.com/product/adobe/technical_communications_suite): 1 vulnerability, 1 version - [Form Client](https://www.precursorintelligence.com/product/adobe/form_client): 1 vulnerability, 1 version - [Photoshop 2022](https://www.precursorintelligence.com/product/adobe/photoshop_2022): 1 vulnerability, 1 version - [Photoshop 2023](https://www.precursorintelligence.com/product/adobe/photoshop_2023): 1 vulnerability, 1 version - [Photoshop 2024](https://www.precursorintelligence.com/product/adobe/photoshop_2024): 1 vulnerability, 1 version - [Device Central Cs5](https://www.precursorintelligence.com/product/adobe/device_central_cs5): 1 vulnerability, 1 version ## Questions ### How many vulnerabilities does Adobe have? Our catalogue lists 6,632 published vulnerabilities across 342 products and 4,434 versions from Adobe. The most recent Adobe flaw added to the known-exploited list is CVE-2026-48282, on 7 July 2026. ### Which Adobe vulnerabilities are being exploited? 79 Adobe vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2026-48282, CVE-2009-3459 and CVE-2020-9715. The full list is on this page. ### Which Adobe product has the most vulnerabilities? Acrobat Reader Dc, with 1,761 published vulnerabilities. Its own page lists the ones known to be exploited. ### How do I get alerts for new Adobe vulnerabilities? Create a Precursor Intelligence account and track the Adobe products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook. ## Running Adobe? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact