CyberSecBulletin

Adobe vulnerabilities

We track 1,726 vulnerabilities in Adobe products across 60+ products. 1,723 are rated high or critical, and 83 have been exploited in real attacks. The most recent was published on November 10, 2026.

1,726vulnerabilities
218critical
1,505high
83exploited
8.1average CVSS score

Latest Adobe vulnerabilities

  • 7.8 High severity

    Substance3D - Painter: Access of Uninitialized Pointer

    CVE-2023-29278Adobe

    Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in th

  • 7.8 High severity

    Substance3D - Painter: Out-of-bounds Write

    CVE-2023-29276Adobe

    Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim

  • 7.8 High severity

    Substance3D - Painter: Out-of-bounds Read

    CVE-2023-29275Adobe

    Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to

  • 7.8 High severity

    Substance3D - Painter: Out-of-bounds Read

    CVE-2023-29274Adobe

    Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to

  • 7.8 High severity

    Substance3D - Painter: Out-of-bounds Read

    CVE-2023-29273Adobe

    Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to

  • 7.8 High severity

    Substance3D - Designer: Out-of-bounds Write

    CVE-2023-26416Adobe

    Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a

  • 7.8 High severity

    Substance3D - Designer: Out-of-bounds Write

    CVE-2023-26415Adobe

    Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim

  • 7.8 High severity

    Substance3D - Designer: Use After Free

    CVE-2023-26414Adobe

    Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must

  • 7.8 High severity

    Substance3D - Designer: Out-of-bounds Write

    CVE-2023-26413Adobe

    Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a

  • 7.8 High severity

    Substance3D - Designer: Out-of-bounds Write

    CVE-2023-26412Adobe

    Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a

  • 7.8 High severity

    Substance3D - Designer: Out-of-bounds Read

    CVE-2023-26411Adobe

    Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability t

  • 7.8 High severity

    Substance3D - Designer: Use After Free

    CVE-2023-26410Adobe

    Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must

  • 7.8 High severity

    Substance3D - Designer: Out-of-bounds Read

    CVE-2023-26409Adobe

    Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability t

  • 7.8 High severity

    Substance3D - Designer: Out-of-bounds Read

    CVE-2023-26398Adobe

    Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability t

  • 7.8 High severity

    Substance3D - Stager: Out-of-bounds Read

    CVE-2023-26402Adobe

    Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to e

  • 7.8 High severity

    Substance3D - Stager: Out-of-bounds Write

    CVE-2023-26394Adobe

    Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vic

  • 7.8 High severity

    Substance3D - Stager: Out-of-bounds Read

    CVE-2023-26393Adobe

    Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to e

  • 7.8 High severity

    Substance3D - Stager: Use After Free

    CVE-2023-26392Adobe

    Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must ope

  • 7.8 High severity

    Substance3D - Stager: Out-of-bounds Read

    CVE-2023-26391Adobe

    Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to e

  • 7.8 High severity

    Substance3D - Stager: Out-of-bounds Write

    CVE-2023-26390Adobe

    Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vi

  • 7.8 High severity

    Substance3D - Stager: Out-of-bounds Read

    CVE-2023-26389Adobe

    Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to e

  • 7.8 High severity

    Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an Improper Input…

    CVE-2023-26388Adobe

    Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vic

  • 7.8 High severity

    Substance3D - Stager: Use After Free

    CVE-2023-26384Adobe

    Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must ope

  • 7.8 High severity

    Substance3D - Stager: Out-of-bounds Write

    CVE-2023-26383Adobe

    Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vi

  • 7.8 High severity

    InCopy: Use After Free

    CVE-2023-22235Adobe

    InCopy versions 18.1 (and earlier), 17.4 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must o

  • 7.8 High severity

    Digital Editions: Out-of-bounds Write

    CVE-2023-21582Adobe

    Adobe Digital Editions version 4.5.11.187303 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vict

  • 7.8 High severity

    Acrobat Reader: Out-of-bounds Read

    CVE-2023-26425AdobeEPSS 2.58%

    Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker cou

  • 7.8 High severity

    Acrobat Reader: Use After Free

    CVE-2023-26424AdobeEPSS 2.71%

    Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in

  • 7.8 High severity

    Acrobat Reader: Use After Free

    CVE-2023-26423AdobeEPSS 3.14%

    Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in

  • 7.8 High severity

    Acrobat Reader: Use After Free

    CVE-2023-26422AdobeEPSS 3.14%

    Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in

  • 7.8 High severity

    Acrobat Reader: Integer Underflow (Wrap or Wraparound)

    CVE-2023-26421AdobeEPSS 4.57%

    Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Integer Underflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu

  • 7.8 High severity

    Acrobat Reader: Use After Free

    CVE-2023-26420AdobeEPSS 2.71%

    Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in

  • 7.8 High severity

    Acrobat Reader: Use After Free

    CVE-2023-26419AdobeEPSS 2.71%

    Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in

  • 7.8 High severity

    Acrobat Reader: Use After Free

    CVE-2023-26418AdobeEPSS 2.71%

    Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in

  • 7.8 High severity

    Acrobat Reader: Use After Free

    CVE-2023-26417AdobeEPSS 2.62%

    Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in

  • 7.8 High severity

    Acrobat Reader: Improper Access Control

    CVE-2023-26408AdobeEPSS 4.33%

    Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir

  • 7.8 High severity

    Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are…

    CVE-2023-26407AdobeEPSS 4.31%

    Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ

  • 7.8 High severity

    Acrobat Reader: Improper Access Control

    CVE-2023-26406AdobeEPSS 4.19%

    Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir

  • 7.8 High severity

    Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are…

    CVE-2023-26405AdobeEPSS 4.31%

    Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ

  • 7.8 High severity

    Acrobat Reader: Creation of Temporary File in Directory with Insecure Permissions

    CVE-2023-26396AdobeEPSS 4.03%

    Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current u