MSRXAdobe vulnerabilities being exploited
7 Adobe flaws were confirmed exploited in the wild in the past 365 days, across 4 products: Acrobat, Acrobat and Reader, ColdFusion, Commerce and Magento. If you run any of them, patch these first.
| Added | Exploited vulnerability | Fix by |
|---|---|---|
| 2026-10-27 | CVE-2026-48356 Commerce and Magento Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. | 2026-11-10 |
| 2026-09-24 | CVE-2026-71362 Commerce and Magento Adobe Commerce and Magento Incorrect Authorization Vulnerability Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction. | 2026-09-27 |
| 2026-09-08 | CVE-2026-75650 Commerce and Magento Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code. | 2026-09-11 |
| 2026-07-07 | CVE-2026-48282 ColdFusion Adobe ColdFusion Path Traversal Vulnerability Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user. | 2026-07-10 |
| 2026-05-20 | CVE-2009-3459 Acrobat and Reader Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption. | 2026-06-03 |
| 2026-04-13 | CVE-2026-34621 Acrobat and Reader Adobe Acrobat and Reader Prototype Pollution Vulnerability Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution. | 2026-04-27 |
| 2026-04-13 | CVE-2020-9715 Acrobat Adobe Acrobat Use-After-Free Vulnerability Adobe Acrobat contains a use-after-free vulnerability that allows for code execution | 2026-04-27 |
Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.