This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vendor Profiles

Adobe

Number 6 by total vulnerabilities in the catalog.

Computed from the whole catalog when the site is built.

Compare with another vendor

Total vulnerabilities

5,274

Critical

233

High

1,905

Known Exploited

76

Exploit available

17

Network, no login needed

10.7%

Of 4,451 scored records

New vulnerabilities per year, by severity
  • Critical
  • High
  • Medium
  • Low
  • None or not scored
Show as table
PeriodTotalCriticalHighMediumLowNone or not scored
2026 (incomplete)1,134138517466130
202582925275519100
202475314237491110
202368112259394160
20224609262167220
202143220246113530
2020348757218255
20194621240455
20181215120113
2017000000
2016606000
201510010000
2014606000
20131028000
2012504100
2011403100
2010605100
2009404000
2008303000

Top products

ProductTotalCritical/High
Adobe Experience Manager9289
Adobe Acrobat and Reader5161
Acrobat Reader419250
Adobe Experience Manager as a Cloud Service22714
Adobe Commerce210105
After Effects13689
Illustrator13581
InDesign Desktop13383
Dimension11669
ColdFusion11573

Top bug types

Bug typeTotalCritical/High
Memory Corruption1,9181,217
Cross-Site Scripting1,30180
Improper Input Validation180105
Incorrect Authorization12685
Access of Memory Location After End of Buffer (CWE-788)112104
Stack-based Buffer Overflow (CWE-121)7166
Improper Access Control6427
Path Traversal6346
Access of Uninitialized Pointer (CWE-824)4628
Integer Underflow (Wrap or Wraparound) (CWE-191)4233

Known to be attacked

CVETitlePublishedSeverityEPSS
CVE-2026-75650Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)Critical99.4%
CVE-2026-71362Adobe Commerce | Incorrect Authorization (CWE-863)Critical91.7%
CVE-2026-48356Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)Critical47.5%
CVE-2026-48282ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Critical42.4%
CVE-2026-34621Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)High7.3%
CVE-2025-54236Adobe Commerce | Improper Input Validation (CWE-20)Critical95.5%
CVE-2025-54253Adobe Experience Manager | Incorrect Authorization (CWE-863)Critical80.8%
CVE-2024-34102XXE can expose crypt key and other secrets granting full admin accessCritical100.0%
CVE-2024-20767ColdFusion | Improper Access Control (CWE-284)High98.5%
CVE-2023-38205ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298High99.8%

Newest vulnerabilities

CVETitlePublishedSeverityEPSS
CVE-2026-82012Premiere Pro | Out-of-bounds Write (CWE-787)Highn/a
CVE-2026-82002Media Encoder | Incorrect Authorization (CWE-863)Highn/a
CVE-2026-48402Premiere Pro | Untrusted Search Path (CWE-426)Highn/a
CVE-2026-123341Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Mediumn/a
CVE-2026-123267CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Mediumn/a
CVE-2026-123263After Effects | Heap-based Buffer Overflow (CWE-122)Highn/a
CVE-2026-123262CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)Mediumn/a
CVE-2026-123261CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)Mediumn/a
CVE-2026-123260CAI Content Credentials | Improper Input Validation (CWE-20)Mediumn/a
CVE-2026-123259Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Mediumn/a