Adobe: CISA KEV History
Every Adobe vulnerability in the CISA Known Exploited Vulnerabilities catalog: confirmed in-the-wild exploitation, addition timeline, and ransomware linkage. Rebuilt automatically on every site deploy.
Snapshot: 2026-09-08 · Source: CISA KEV Catalog · Full KEV dashboard
KEV entries
81
Added, last 12 months
7
Ransomware-linked
11
Latest addition
2026-09-08
Adobe KEV additions per month, last 24 months
Most-listed products: Flash Player, ColdFusion, Acrobat and Reader, Reader and Acrobat, Commerce and Magento Open Source.
Latest 50 of 81 Adobe KEV entries
| CVE | Vulnerability | Added | Ransomware |
|---|---|---|---|
| CVE-2026-75650 | Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template | 2026-09-08 | No |
| CVE-2026-48282 | Adobe ColdFusion Path Traversal Vulnerability | 2026-07-07 | No |
| CVE-2009-3459 | Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability | 2026-05-20 | No |
| CVE-2020-9715 | Adobe Acrobat Use-After-Free Vulnerability | 2026-04-13 | No |
| CVE-2026-34621 | Adobe Acrobat and Reader Prototype Pollution Vulnerability | 2026-04-13 | No |
| CVE-2025-54236 | Adobe Commerce and Magento Improper Input Validation Vulnerability | 2025-10-24 | No |
| CVE-2025-54253 | Adobe Experience Manager Forms Code Execution Vulnerability | 2025-10-15 | No |
| CVE-2017-3066 | Adobe ColdFusion Deserialization Vulnerability | 2025-02-24 | No |
| CVE-2024-20767 | Adobe ColdFusion Improper Access Control Vulnerability | 2024-12-16 | No |
| CVE-2014-0502 | Adobe Flash Player Double Free Vulnerablity | 2024-09-17 | No |
| CVE-2013-0648 | Adobe Flash Player Code Execution Vulnerability | 2024-09-17 | No |
| CVE-2013-0643 | Adobe Flash Player Incorrect Default Permissions Vulnerability | 2024-09-17 | No |
| CVE-2014-0497 | Adobe Flash Player Integer Underflow Vulnerablity | 2024-09-17 | No |
| CVE-2024-34102 | Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Referen | 2024-07-17 | No |
| CVE-2023-29300 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 2024-01-08 | Yes |
| CVE-2023-38203 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 2024-01-08 | Yes |
| CVE-2023-21608 | Adobe Acrobat and Reader Use-After-Free Vulnerability | 2023-10-10 | No |
| CVE-2023-26369 | Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability | 2023-09-14 | No |
| CVE-2023-26359 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 2023-08-21 | No |
| CVE-2023-29298 | Adobe ColdFusion Improper Access Control Vulnerability | 2023-07-20 | No |
| CVE-2023-38205 | Adobe ColdFusion Improper Access Control Vulnerability | 2023-07-20 | No |
| CVE-2023-26360 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 2023-03-15 | No |
| CVE-2018-4990 | Adobe Acrobat and Reader Double Free Vulnerability | 2022-06-08 | No |
| CVE-2012-5054 | Adobe Flash Player Integer Overflow Vulnerability | 2022-06-08 | No |
| CVE-2012-0767 | Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability | 2022-06-08 | No |
| CVE-2012-0754 | Adobe Flash Player Memory Corruption Vulnerability | 2022-06-08 | No |
| CVE-2011-2462 | Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability | 2022-06-08 | No |
| CVE-2011-0609 | Adobe Flash Player Unspecified Vulnerability | 2022-06-08 | No |
| CVE-2010-2883 | Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability | 2022-06-08 | No |
| CVE-2010-1297 | Adobe Flash Player Memory Corruption Vulnerability | 2022-06-08 | No |
| CVE-2009-4324 | Adobe Acrobat and Reader Use-After-Free Vulnerability | 2022-06-08 | No |
| CVE-2009-3953 | Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability | 2022-06-08 | No |
| CVE-2009-1862 | Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability | 2022-06-08 | No |
| CVE-2008-0655 | Adobe Acrobat and Reader Unspecified Vulnerability | 2022-06-08 | No |
| CVE-2007-5659 | Adobe Acrobat and Reader Buffer Overflow Vulnerability | 2022-06-08 | No |
| CVE-2016-1010 | Adobe Flash Player and AIR Integer Overflow Vulnerability | 2022-05-25 | No |
| CVE-2016-0984 | Adobe Flash Player and AIR Use-After-Free Vulnerability | 2022-05-25 | No |
| CVE-2015-0310 | Adobe Flash Player ASLR Bypass Vulnerability | 2022-05-25 | No |
| CVE-2015-8651 | Adobe Flash Player Integer Overflow Vulnerability | 2022-05-25 | No |
| CVE-2014-8439 | Adobe Flash Player Dereferenced Pointer Vulnerability | 2022-05-25 | No |
| CVE-2014-0546 | Adobe Reader and Acrobat Sandbox Bypass Vulnerability | 2022-05-25 | No |
| CVE-2018-5002 | Adobe Flash Player Stack-based Buffer Overflow Vulnerability | 2022-05-23 | No |
| CVE-2015-5123 | Adobe Flash Player Use-After-Free Vulnerability | 2022-04-13 | No |
| CVE-2015-5122 | Adobe Flash Player Use-After-Free Vulnerability | 2022-04-13 | No |
| CVE-2015-3113 | Adobe Flash Player Heap-Based Buffer Overflow Vulnerability | 2022-04-13 | No |
| CVE-2015-0313 | Adobe Flash Player Use-After-Free Vulnerability | 2022-04-13 | No |
| CVE-2015-0311 | Adobe Flash Player Remote Code Execution Vulnerability | 2022-04-13 | No |
| CVE-2014-9163 | Adobe Flash Player Stack-Based Buffer Overflow Vulnerability | 2022-04-13 | No |
| CVE-2013-2729 | Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability | 2022-03-28 | No |
| CVE-2012-2034 | Adobe Flash Player Memory Corruption Vulnerability | 2022-03-28 | No |
CVE links go to our explainer when one exists, otherwise to the NVD record.
Data: official CISA KEV catalog, fetched at build time. Figures may be reused with attribution to East Bay Cyber and CISA. See also the KEV Velocity Dashboard and all tracked vendors.