Vulnerabilities in Adobe

4,915 results
Vexday analysis

Com 4.472 CVEs catalogadas e 237 surgidas nos últimos 90 dias, a superfície de ataque do portfólio Adobe apresenta volume expressivo e ritmo contínuo de descobertas. A taxa de exploração ativa — 18 entradas no CISA KEV — está em linha com a média geral do catálogo, mas o EPSS de 0,9999 associado à CVE-2024-34102 indica probabilidade máxima de exploração para essa vulnerabilidade específica, exigindo atenção imediata de equipes de resposta. O tipo de falha mais comum é CWE-79 (Cross-Site Scripting), o que sugere fragilidades persistentes na sanitização de entrada em componentes voltados à renderização de conteúdo. A existência de 30 CVEs com prova de conceito pública, combinada a 105 de severidade crítica, reforça a necessidade de priorização rigorosa no ciclo de patching para produtos Adobe em ambientes expostos.

CVE-2025-27203CRITICALAdobe Connect | Deserialization of Untrusted Data (CWE-502)EPSS 1.0%CVE-2026-48397HIGHLightroom Classic | Deserialization of Untrusted Data (CWE-502)EPSS 1.0%CVE-2026-48326CRITICALAdobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)EPSS 1.0%CVE-2022-34257MEDIUMAdobe Commerce Stored XSS Arbitrary code executionEPSS 1.0%CVE-2026-48386HIGHColdFusion | Use of a Broken or Risky Cryptographic Algorithm (CWE-327)EPSS 1.0%CVE-2025-24418HIGHAdobe Commerce | Improper Authorization (CWE-285)EPSS 1.0%CVE-2023-22250MEDIUMAdobe Commerce Improper Access Control Security feature bypassEPSS 1.0%CVE-2023-29292MEDIUMServer Side Request Forgery (SSRF) in FedEx carrier integration configurationEPSS 1.0%CVE-2025-24408MEDIUMAdobe Commerce | Information Exposure (CWE-200)EPSS 1.0%CVE-2026-47938CRITICALAdobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)EPSS 0.9%CVE-2026-48331CRITICALAdobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)EPSS 0.9%CVE-2026-48333CRITICALAdobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)EPSS 0.9%CVE-2020-3766—Adobe Genuine Integrity Service versions Version 6.4 and earlier have an insecure file permissions vulnerability. Successful exploitation coEPSS 0.9%CVE-2026-48317CRITICALAdobe Campaign Classic (ACC) | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)EPSS 0.9%CVE-2024-45116HIGHAdobe Commerce | Cross-site Scripting (XSS) (CWE-79)EPSS 0.9%CVE-2024-52831LOWAdobe Experience Manager | Improper Input Validation (CWE-20)EPSS 0.9%CVE-2024-43755LOWAdobe Experience Manager | Improper Input Validation (CWE-20)EPSS 0.9%CVE-2023-38207HIGHAdobe Commerce XML Injection (aka Blind XPath Injection) Arbitrary file system readEPSS 0.9%CVE-2023-22247HIGHAdobe Commerce XML Injection Arbitrary file system readEPSS 0.9%CVE-2026-71443HIGHCAI Content Credentials | Improper Input Validation (CWE-20)EPSS 0.9%