Browse high-severity CVEs

Acrobat HIGH 7.8

CVE-2023-26406

Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Improper Access Control vulnerability that…

Fix: after 23.001.20093

Fix from $1,950 2023-04-12

Commerce MEDIUM 5.3

CVE-2023-22250

Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an Improper Access Control vulnerability that could result …

Fix: 2.4.4+

Fix from $1,600 2023-03-27

Coldfusion HIGH 8.6

CVE-2023-26360 KEVEPSS 97%

Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that …

Patch available

Fix from $1,950 2023-03-23

Connect MEDIUM 5.3

CVE-2023-22232EPSS 82%

Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Sec…

Fix: after 12.1.5

Fix from $1,600 2023-02-17

Commerce MEDIUM 5.3

CVE-2022-35689

Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in …

Fix: 2.4.4+

Fix from $1,600 2022-10-14

Commerce HIGH 8.8

CVE-2022-34255

Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control vulnerabili…

Fix: 2.3.7 / 2.4.3+

Fix from $1,950 2022-08-16

Commerce MEDIUM 5.3

CVE-2022-34259

Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control vulnerabili…

Fix: 2.3.7 / 2.4.3+

Fix from $1,600 2022-08-16

Experience Manager HIGH 7.5

CVE-2021-21083

AEM's Cloud Service offering, as well as versions 6.5.7.0 (and below), 6.4.8.3 (and below) and 6.3.3.8 (and below) are affected by an Improper Access…

Fix: 6.4.8.4 / 6.5.8.0+

Fix from $1,950 2021-06-28

Coldfusion HIGH 7.8

CVE-2020-10145

The Adobe ColdFusion installer fails to set a secure access-control list (ACL) on the default installation directory, such as C:\ColdFusion2021\. By …

Mitigation only

Fix from $1,950 2021-05-27

Genuine Service HIGH 7.8

CVE-2020-9668

Adobe Genuine Service version 6.6 (and earlier) is affected by an Improper Access control vulnerability when handling symbolic links. An unauthentica…

Fix: after 6.6

Fix from $1,950 2021-04-16

Acrobat HIGH 8.2

CVE-2021-21045

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an im…

Fix: after 20.013.20074

Fix from $1,950 2021-02-11

Acrobat Reader MEDIUM 5.5

CVE-2020-24441

Adobe Acrobat Reader for Android version 20.6.2 (and earlier) does not properly restrict access to directories created by the application. This could…

Fix: after 20.6.2

Fix from $1,600 2020-11-12

Acrobat HIGH 7.8

CVE-2020-24433EPSS 16%

Adobe Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a local …

Fix: after 20.012.20048

Fix from $1,950 2020-11-05

Acrobat CRITICAL 9.8

CVE-2016-6958

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous befo…

Fix: after 15.017.20053

Fix from $2,300 2016-10-13

Acrobat CRITICAL 9.8

CVE-2016-4215EPSS 6%

Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous befo…

Fix: after 15.016.20045

Fix from $2,300 2016-07-13

Acrobat CRITICAL 9.8

CVE-2016-1117EPSS 6%