Vulnerabilidades em Adobe

4.597 resultados
Análise Vexday

Com 4.472 CVEs catalogadas e 237 surgidas nos últimos 90 dias, a superfície de ataque do portfólio Adobe apresenta volume expressivo e ritmo contínuo de descobertas. A taxa de exploração ativa — 18 entradas no CISA KEV — está em linha com a média geral do catálogo, mas o EPSS de 0,9999 associado à CVE-2024-34102 indica probabilidade máxima de exploração para essa vulnerabilidade específica, exigindo atenção imediata de equipes de resposta. O tipo de falha mais comum é CWE-79 (Cross-Site Scripting), o que sugere fragilidades persistentes na sanitização de entrada em componentes voltados à renderização de conteúdo. A existência de 30 CVEs com prova de conceito pública, combinada a 105 de severidade crítica, reforça a necessidade de priorização rigorosa no ciclo de patching para produtos Adobe em ambientes expostos.

CVE-2021-39843HIGHAdobe Acrobat Reader XObject Out-of-Bound Write VulnerabilityEPSS 76.7%CVE-2022-35711CRITICALAdobe ColdFusion ODBC Server Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 73.5%CVE-2022-35690CRITICALAdobe ColdFusion ODBC Agent Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 72.2%CVE-2021-39836HIGHAdobe Acrobat Reader DC AcroForm buttonGetIcon Use-After-Free Remote Code Execution VulnerabilityEPSS 69.5%CVE-2022-34258MEDIUMAdobe Commerce Stored XSS Arbitrary code executionEPSS 68.3%CVE-2019-7816—ColdFusion versions Update 2 and earlier, Update 9 and earlier, and Update 17 and earlier have a file upload restriction bypass vulnerabilitEPSS 67.1%CVE-2021-28560HIGHAdobe Acrobat Reader heap corruption vulnerability could lead to arbitrary code executionEPSS 66.9%CVE-2023-38204CRITICALBypass APSB23-41 (CVE-2023-38203) - Pre-Auth RCE ColdFusion 2021 Update 8EPSS 66.8%CVE-2021-28639HIGHAdobe Acrobat Reader DC setAction Use-After-Free Remote Code Execution VulnerabilityEPSS 66.1%CVE-2021-39838HIGHAdobe Acrobat Reader DC AcroForm buttonGetCaption Use-After-Free Remote Code Execution VulnerabilityEPSS 65.2%CVE-2021-39839HIGHAdobe Acrobat Reader DC AcroForm getItemAt Use-After-Free Remote Code Execution VulnerabilityEPSS 65.2%CVE-2021-39837HIGHAdobe Acrobat Reader DC AcroForm deleteItemAt Use-After-Free Remote Code Execution VulnerabilityEPSS 65.2%CVE-2023-44350CRITICALColdFusion | Deserialization of Untrusted Data (CWE-502)EPSS 64.6%CVE-2023-26361MEDIUMAdobe ColdFusion Directory Traversal Arbitrary file system read VulnerabilityEPSS 62.3%CVE-2023-21608HIGHAdobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution VulnerabilityEPSS 61.5%KEVCVE-2023-22249MEDIUMAdobe Commerce Stored XSS Arbitrary code executionEPSS 57.4%CVE-2021-44703HIGHAdobe Acrobat Pro DC Stack Overflow Vulnerability Arbitrary code executionEPSS 57.3%CVE-2019-7111—Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.3EPSS 54.1%CVE-2021-40728HIGHAdobe Acrobat Reader DC Use After Free Arbitrary Code ExecutionEPSS 53.5%CVE-2022-38419HIGHAdobe ColdFusion Solr Service XML External Entity Processing Arbitrary file system readEPSS 53.0%