Vulnerabilities in Adobe

4,915 results
Vexday analysis

Com 4.472 CVEs catalogadas e 237 surgidas nos últimos 90 dias, a superfície de ataque do portfólio Adobe apresenta volume expressivo e ritmo contínuo de descobertas. A taxa de exploração ativa — 18 entradas no CISA KEV — está em linha com a média geral do catálogo, mas o EPSS de 0,9999 associado à CVE-2024-34102 indica probabilidade máxima de exploração para essa vulnerabilidade específica, exigindo atenção imediata de equipes de resposta. O tipo de falha mais comum é CWE-79 (Cross-Site Scripting), o que sugere fragilidades persistentes na sanitização de entrada em componentes voltados à renderização de conteúdo. A existência de 30 CVEs com prova de conceito pública, combinada a 105 de severidade crítica, reforça a necessidade de priorização rigorosa no ciclo de patching para produtos Adobe em ambientes expostos.

CVE-2023-38249HIGHAdobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)EPSS 0.8%CVE-2026-48416HIGHAdobe Commerce | Incorrect Authorization (CWE-863)EPSS 0.8%CVE-2026-77774HIGHAdobe Commerce | Incorrect Authorization (CWE-863)EPSS 0.8%CVE-2026-48285HIGHColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)EPSS 0.8%CVE-2026-76190HIGHColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)EPSS 0.8%CVE-2024-54032CRITICALAdobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)EPSS 0.8%CVE-2021-28567MEDIUMMagento Commerce improper authorization allows an authenticated user to perform certain functions without permissionEPSS 0.8%CVE-2025-30293MEDIUMColdFusion | Improper Input Validation (CWE-20)EPSS 0.8%CVE-2026-77108HIGHAdobe Commerce | Incorrect Authorization (CWE-863)EPSS 0.8%CVE-2026-75998HIGHColdFusion | Improper Access Control (CWE-284)EPSS 0.8%CVE-2026-48328HIGHColdFusion | Improper Input Validation (CWE-20)EPSS 0.8%CVE-2022-35692MEDIUMAdobe Commerce Improper Access Control Security feature bypassEPSS 0.8%CVE-2026-82013CRITICALAdobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)EPSS 0.8%CVE-2023-22271MEDIUMAEM Weak Cryptography for Passwords Security feature bypassEPSS 0.8%CVE-2026-48375MEDIUMColdFusion | Incorrect Authorization (CWE-863)EPSS 0.8%CVE-2026-81999HIGHAdobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)EPSS 0.8%CVE-2026-34654MEDIUMAdobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395)EPSS 0.8%CVE-2025-24438HIGHAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)EPSS 0.8%CVE-2020-24420HIGHUncontrolled Search Path Element in Adobe Photoshop for WindowsEPSS 0.8%CVE-2026-48448HIGHAdobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)EPSS 0.8%