Adobe
83 Adobe flaws are on CISA's list of vulnerabilities attackers have used, 7 of them added in 2026. CISA says 11 are known to be used by ransomware. The latest was added Oct 27, 2026.
83on CISA's list, all time
7added in 2026
3in the last 90 days
11used by ransomware
7zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| Flash Player | 33 | Sep 17, 2024 |
| ColdFusion | 16 | Jul 7, 2026 |
| Acrobat and Reader | 13 | May 20, 2026 |
| Reader and Acrobat | 8 | Jun 8, 2022 |
| Commerce and Magento | 2 | Oct 27, 2026 |
| Commerce and Magento Open Source | 2 | Jul 17, 2024 |
| Flash Player and AIR | 2 | May 25, 2022 |
| Commerce and Magento | 1 | Sep 24, 2026 |
| Acrobat | 1 | Apr 13, 2026 |
| Commerce and Magento | 1 | Oct 24, 2025 |
Latest Adobe flaws
- Commerce and MagentoAdobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
- Commerce and Magento Adobe Commerce and Magento Incorrect Authorization Vulnerability
- Commerce and MagentoAdobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
- ColdFusionAdobe ColdFusion Path Traversal Vulnerability
- Acrobat and ReaderAdobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
- AcrobatAdobe Acrobat Use-After-Free Vulnerability
- Acrobat and ReaderAdobe Acrobat and Reader Prototype Pollution Vulnerability
- Commerce and MagentoAdobe Commerce and Magento Improper Input Validation Vulnerability
- Experience Manager (AEM) FormsAdobe Experience Manager Forms Code Execution Vulnerability
- ColdFusionAdobe ColdFusion Deserialization Vulnerability
- ColdFusionAdobe ColdFusion Improper Access Control Vulnerability
- Flash PlayerAdobe Flash Player Incorrect Default Permissions Vulnerability
- Flash PlayerAdobe Flash Player Code Execution Vulnerability
- Flash PlayerAdobe Flash Player Integer Underflow Vulnerablity
- Flash PlayerAdobe Flash Player Double Free Vulnerablity
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.