Vulnerabilidades em Adobe

4.915 resultados
Análise Vexday

Com 4.472 CVEs catalogadas e 237 surgidas nos últimos 90 dias, a superfície de ataque do portfólio Adobe apresenta volume expressivo e ritmo contínuo de descobertas. A taxa de exploração ativa — 18 entradas no CISA KEV — está em linha com a média geral do catálogo, mas o EPSS de 0,9999 associado à CVE-2024-34102 indica probabilidade máxima de exploração para essa vulnerabilidade específica, exigindo atenção imediata de equipes de resposta. O tipo de falha mais comum é CWE-79 (Cross-Site Scripting), o que sugere fragilidades persistentes na sanitização de entrada em componentes voltados à renderização de conteúdo. A existência de 30 CVEs com prova de conceito pública, combinada a 105 de severidade crítica, reforça a necessidade de priorização rigorosa no ciclo de patching para produtos Adobe em ambientes expostos.

CVE-2026-48273CRITICALColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)EPSS 1.3%CVE-2021-40741MEDIUMAdobe Audition Memory Corruption could lead to Application denial-of-serviceEPSS 1.3%CVE-2026-75638MEDIUMCAI Content Credentials | Improper Input Validation (CWE-20)EPSS 1.3%CVE-2026-48276CRITICALColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)EPSS 1.3%CVE-2026-48283CRITICALColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)EPSS 1.3%CVE-2021-40737MEDIUMAdobe Audition NULL Pointer Dereference Application denial-of-serviceEPSS 1.3%CVE-2021-40742MEDIUMAdobe Audition NULL Pointer Dereference Application denial-of-serviceEPSS 1.3%CVE-2026-48440HIGHColdFusion | Heap-based Buffer Overflow (CWE-122)EPSS 1.3%CVE-2024-45115CRITICALAdobe Commerce | Improper Authentication (CWE-287)EPSS 1.3%CVE-2026-84412CRITICALAdobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)EPSS 1.2%CVE-2026-89275CRITICALAdobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)EPSS 1.2%CVE-2026-73369CRITICALAdobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)EPSS 1.2%CVE-2026-75703CRITICALAdobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)EPSS 1.2%CVE-2026-75699CRITICALAdobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)EPSS 1.2%CVE-2026-75721CRITICALAdobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)EPSS 1.2%CVE-2026-81995CRITICALAdobe Experience Manager Forms JEE | Improper Input Validation (CWE-20)EPSS 1.2%CVE-2021-40774MEDIUMAdobe Prelude NULL Pointer Dereference Application Denial of ServiceEPSS 1.2%CVE-2021-40773MEDIUMAdobe Prelude NULL Pointer Dereference Application Denial of ServiceEPSS 1.2%CVE-2019-8160—Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and eEPSS 1.2%CVE-2026-48294HIGHAdobe Acrobat PDF Extension (Chrome) versions 26.5.2.2 and earlier are affected by a UXSS-class cross-origin data disclosure vulnerability. EPSS 1.2%