CVE Tools
Track your stack

Adobe

7,565 CVEs tracked since 1999. Since Sep 2021, 14 of them reached CISA KEV.

Adobe CVEs per month

Sep 2021 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Adobe CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2021-091491
2021-10140
2021-11450
2021-12290
2022-01480
2022-02221
2022-03540
2022-0460
2022-05970
2022-06470
2022-07340
2022-08270
2022-09660
2022-10340
2022-113 or fewer
2022-12390
2023-01311
2023-02280
2023-03no snapshot
2023-04570
2023-05140
2023-06180
2023-07223
2023-08370
2023-09652
2023-10130
2023-11770
2023-122200
2024-01100
2024-02310
2024-03561
2024-04290
2024-05450
2024-061671
2024-07130
2024-08900
2024-09290
2024-10540
2024-11570
2024-121770
2025-01160
2025-02510
2025-03430
2025-04520
2025-05400
2025-062600
2025-07730
2025-08791
2025-09241
2025-10360
2025-11290
2025-121370
2026-01250
2026-02440
2026-03820
2026-04571
2026-05520
2026-061450
2026-071070
2026-081010
2026-092241
2026-101920
2026-110

Products

The products that kept showing up in Adobe's monthly top three, with their CVEs summed over those months.

  1. Experience Manager1,00713 months
  2. Adobe Experience Manager96811 months
  3. Acrobat Dc26311 months
  4. Acrobat Reader20710 months
  5. Acrobat2018 months
  6. Acrobat Reader Dc1597 months
  7. Experience Manager Cloud Service1472 months
  8. Adobe Experience Manager 6.51402 months
  9. Adobe Experience Manager 6.5 Lts1051 month
  10. Adobe Experience Manager As A Cloud Service1051 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Adobe.

  1. CVE-2020-9709Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have a security bypass vulnerability. Successful exploitation could lead to privilege escalation.—
  2. CVE-2019-16447Adobe Illustrator CC versions 23.1 and earlier have a binary planting vulnerability. Successful exploitation could lead to local code execution.7.8
  3. CVE-2026-113576Adobe Digital Editions | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)6.3
  4. CVE-2026-104353Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)9.9
  5. CVE-2026-105780Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)9.9
  6. CVE-2026-105489Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)9.9
  7. CVE-2026-104354Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)9.1
  8. CVE-2026-104351Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)9.9
  9. CVE-2026-104350Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)9.3
  10. CVE-2026-105781Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)10.0
  11. CVE-2026-105779Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)9.1
  12. CVE-2026-48360Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94)9.6
  13. CVE-2026-48379Substance3D - Painter | Stack-based Buffer Overflow (CWE-121)7.8
  14. CVE-2026-48380Substance3D - Painter | Out-of-bounds Read (CWE-125)5.5
  15. CVE-2026-104349Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)7.3

The record

Peak rank
#1 in Dec 2023
Busiest month shown
Jun 2025, 260 CVEs
Months with a KEV entry
11 since Sep 2021
Monthly snapshots
231 since 1999
Adobe's full record, month by month