Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 35 added in the last 30 days, latest on Nov 6, 2026.
83 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Oct 27, 2026 | CVE-2026-48356 | Adobe · Commerce and Magento | Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability | Critical 9.3 | 47.5% | Nov 10, 2026 |
| Sep 24, 2026 | CVE-2026-71362 | Adobe · Commerce and Magento | Adobe Commerce and Magento Incorrect Authorization Vulnerability | Critical 9.1 | 90.5% | Sep 27, 2026 |
| Sep 8, 2026 | CVE-2026-75650 | Adobe · Commerce and Magento | Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability | Critical 10.0 | 34.7% | Sep 11, 2026 |
| Jul 7, 2026 | CVE-2026-48282 | Adobe · ColdFusion | Adobe ColdFusion Path Traversal Vulnerability | Critical 10.0 | 42.4% | Jul 10, 2026 |
| May 20, 2026 | CVE-2009-3459 | Adobe · Acrobat and Reader | Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability | High 8.8 | 86.5% | Jun 3, 2026 |
| Apr 13, 2026 | CVE-2026-34621 | Adobe · Acrobat and Reader | Adobe Acrobat and Reader Prototype Pollution Vulnerability | High 8.6 | 7.2% | Apr 27, 2026 |
| Apr 13, 2026 | CVE-2020-9715 | Adobe · Acrobat | Adobe Acrobat Use-After-Free Vulnerability | High 7.8 | 33.3% | Apr 27, 2026 |
| Oct 24, 2025 | CVE-2025-54236 | Adobe · Commerce and Magento | Adobe Commerce and Magento Improper Input Validation Vulnerability | Critical 9.1 | 95.4% | Nov 14, 2025 |
| Oct 15, 2025 | CVE-2025-54253 | Adobe · Experience Manager (AEM) Forms | Adobe Experience Manager Forms Code Execution Vulnerability | Critical 10.0 | 80.8% | Nov 5, 2025 |
| Feb 24, 2025 | CVE-2017-3066 | Adobe · ColdFusion | Adobe ColdFusion Deserialization Vulnerability | Critical 9.8 | 90.6% | Mar 17, 2025 |
| Dec 16, 2024 | CVE-2024-20767 | Adobe · ColdFusion | Adobe ColdFusion Improper Access Control Vulnerability | High 7.4 | 98.5% | Jan 6, 2025 |
| Sep 17, 2024 | CVE-2014-0502 | Adobe · Flash Player | Adobe Flash Player Double Free Vulnerablity | High 8.8 | 24.8% | Oct 8, 2024 |
| Sep 17, 2024 | CVE-2014-0497 | Adobe · Flash Player | Adobe Flash Player Integer Underflow Vulnerablity | High 8.8 | 99.9% | Oct 8, 2024 |
| Sep 17, 2024 | CVE-2013-0648 | Adobe · Flash Player | Adobe Flash Player Code Execution Vulnerability | High 8.8 | 11.1% | Oct 8, 2024 |
| Sep 17, 2024 | CVE-2013-0643 | Adobe · Flash Player | Adobe Flash Player Incorrect Default Permissions Vulnerability | High 8.8 | 10.5% | Oct 8, 2024 |
| Jul 17, 2024 | CVE-2024-34102 | Adobe · Commerce and Magento Open Source | Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability | Critical 9.8 | 100.0% | Aug 7, 2024 |
| Jan 8, 2024 | CVE-2023-38203 Ransomware | Adobe · ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 97.1% | Jan 29, 2024 |
| Jan 8, 2024 | CVE-2023-29300 Ransomware | Adobe · ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 100.0% | Jan 29, 2024 |
| Oct 10, 2023 | CVE-2023-21608 | Adobe · Acrobat and Reader | Adobe Acrobat and Reader Use-After-Free Vulnerability | High 7.8 | 59.4% | Oct 31, 2023 |
| Sep 14, 2023 | CVE-2023-26369 | Adobe · Acrobat and Reader | Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability | High 7.8 | 7.5% | Oct 5, 2023 |
| Aug 21, 2023 | CVE-2023-26359 | Adobe · ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 17.0% | Sep 11, 2023 |
| Jul 20, 2023 | CVE-2023-38205 | Adobe · ColdFusion | Adobe ColdFusion Improper Access Control Vulnerability | High 7.5 | 99.8% | Aug 10, 2023 |
| Jul 20, 2023 | CVE-2023-29298 | Adobe · ColdFusion | Adobe ColdFusion Improper Access Control Vulnerability | High 7.5 | 99.8% | Aug 10, 2023 |
| Mar 15, 2023 | CVE-2023-26360 | Adobe · ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | High 8.6 | 97.3% | Apr 5, 2023 |
| Jun 8, 2022 | CVE-2018-4990 | Adobe · Acrobat and Reader | Adobe Acrobat and Reader Double Free Vulnerability | High 8.8 | 35.9% | Jun 22, 2022 |
| Jun 8, 2022 | CVE-2012-5054 | Adobe · Flash Player | Adobe Flash Player Integer Overflow Vulnerability | High 8.8 | 21.2% | Jun 22, 2022 |
| Jun 8, 2022 | CVE-2012-0767 | Adobe · Flash Player | Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability | Medium 6.1 | 6.2% | Jun 22, 2022 |
| Jun 8, 2022 | CVE-2012-0754 | Adobe · Flash Player | Adobe Flash Player Memory Corruption Vulnerability | High 7.8 | 91.1% | Jun 22, 2022 |
| Jun 8, 2022 | CVE-2011-2462 | Adobe · Reader and Acrobat | Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability | High 8.8 | 88.6% | Jun 22, 2022 |
| Jun 8, 2022 | CVE-2011-0609 | Adobe · Flash Player | Adobe Flash Player Unspecified Vulnerability | High 7.8 | 63.5% | Jun 22, 2022 |
| Jun 8, 2022 | CVE-2010-2883 | Adobe · Acrobat and Reader | Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability | High 7.3 | 81.4% | Jun 22, 2022 |
| Jun 8, 2022 | CVE-2010-1297 | Adobe · Flash Player | Adobe Flash Player Memory Corruption Vulnerability | High 7.8 | 82.5% | Jun 22, 2022 |
| Jun 8, 2022 | CVE-2009-4324 | Adobe · Acrobat and Reader | Adobe Acrobat and Reader Use-After-Free Vulnerability | High 7.8 | 81.9% | Jun 22, 2022 |
| Jun 8, 2022 | CVE-2009-3953 | Adobe · Acrobat and Reader | Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability | High 8.8 | 83.2% | Jun 22, 2022 |
| Jun 8, 2022 | CVE-2009-1862 | Adobe · Acrobat and Reader, Flash Player | Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability | High 7.8 | 21.2% | Jun 22, 2022 |
| Jun 8, 2022 | CVE-2008-0655 | Adobe · Acrobat and Reader | Adobe Acrobat and Reader Unspecified Vulnerability | High 8.8 | 37.9% | Jun 22, 2022 |
| Jun 8, 2022 | CVE-2007-5659 | Adobe · Acrobat and Reader | Adobe Acrobat and Reader Buffer Overflow Vulnerability | High 7.8 | 87.4% | Jun 22, 2022 |
| May 25, 2022 | CVE-2016-1010 | Adobe · Flash Player and AIR | Adobe Flash Player and AIR Integer Overflow Vulnerability | High 8.8 | 19.3% | Jun 15, 2022 |
| May 25, 2022 | CVE-2016-0984 | Adobe · Flash Player and AIR | Adobe Flash Player and AIR Use-After-Free Vulnerability | High 8.8 | 54.5% | Jun 15, 2022 |
| May 25, 2022 | CVE-2015-8651 | Adobe · Flash Player | Adobe Flash Player Integer Overflow Vulnerability | High 8.8 | 67.7% | Jun 15, 2022 |
| May 25, 2022 | CVE-2015-0310 | Adobe · Flash Player | Adobe Flash Player ASLR Bypass Vulnerability | High 7.8 | 15.1% | Jun 15, 2022 |
| May 25, 2022 | CVE-2014-8439 | Adobe · Flash Player | Adobe Flash Player Dereferenced Pointer Vulnerability | High 8.8 | 20.4% | Jun 15, 2022 |
| May 25, 2022 | CVE-2014-0546 | Adobe · Reader and Acrobat | Adobe Reader and Acrobat Sandbox Bypass Vulnerability | High 8.8 | 22.3% | Jun 15, 2022 |
| May 23, 2022 | CVE-2018-5002 | Adobe · Flash Player | Adobe Flash Player Stack-based Buffer Overflow Vulnerability | High 7.8 | 24.4% | Jun 13, 2022 |
| Apr 13, 2022 | CVE-2015-5123 | Adobe · Flash Player | Adobe Flash Player Use-After-Free Vulnerability | High 7.8 | 18.8% | May 4, 2022 |
| Apr 13, 2022 | CVE-2015-5122 | Adobe · Flash Player | Adobe Flash Player Use-After-Free Vulnerability | High 7.8 | 87.0% | May 4, 2022 |
| Apr 13, 2022 | CVE-2015-3113 | Adobe · Flash Player | Adobe Flash Player Heap-Based Buffer Overflow Vulnerability | High 7.8 | 99.8% | May 4, 2022 |
| Apr 13, 2022 | CVE-2015-0313 | Adobe · Flash Player | Adobe Flash Player Use-After-Free Vulnerability | High 7.8 | 95.3% | May 4, 2022 |
| Apr 13, 2022 | CVE-2015-0311 | Adobe · Flash Player | Adobe Flash Player Remote Code Execution Vulnerability | High 7.8 | 85.6% | May 4, 2022 |
| Apr 13, 2022 | CVE-2014-9163 | Adobe · Flash Player | Adobe Flash Player Stack-Based Buffer Overflow Vulnerability | High 7.8 | 44.9% | May 4, 2022 |