Vulnerabilità per vendor · aggiornato a ogni pubblicazione
Vulnerabilità Adobe: CVE sfruttate e nostre analisi
Adobe ha 82 vulnerabilità nel catalogo CISA Known Exploited Vulnerabilities, 7 delle quali aggiunte negli ultimi 12 mesi e 11 note per l'uso in campagne ransomware. Qui sotto: le 3 analisi pubblicate da Zero Hunt Research sui prodotti Adobe, poi le voci del catalogo dalla più recente, con la scadenza federale.
Catalogo CISA versione 2026.10.21, pubblicato il 2026-10-21 14:04 UTC.
82
CVE in CISA KEV
7
Aggiunte negli ultimi 12 mesi
11
Uso noto nel ransomware
3
Analisi Zero Hunt
Prodotti con più voci nel KEV: Flash Player (33) · ColdFusion (16) · Acrobat and Reader (13) · Reader and Acrobat (8) · Commerce and Magento Open Source (2) · Flash Player and AIR (2)
Le nostre analisi delle vulnerabilità Adobe
2026-09-08
CVE-2026-75650 StyleSmuggler: zero-day Magento che installa backdoorCVE-2026-75650: RCE non autenticata CVSS 10 in Magento e Adobe Commerce, sfruttata dal 4 settembre per installare una backdoor Rust travestita da NTP.
2026-08-03
Adobe Campaign Classic CVE-2026-48449: lo stesso CVSS 10.0, per la terza voltaTerzo bypass di autorizzazione CVSS 10.0 in Adobe Campaign Classic in 50 giorni. La build che vi metteva in sicurezza a giugno è quella vulnerabile a luglio — e Adobe sta per smettere di contarli separatamente.
2026-07-04
ColdFusion CVE-2026-48282: sfruttata poche ore dopo la patchIl 1° luglio Adobe ha corretto sei falle ColdFusion CVSS 10.0. In poche ore CVE-2026-48282 era già sotto attacco: la finestra di lettura file prima della patch è ciò che quasi nessun difensore vede.
Le ultime 40 di 82 voci KEV
| Aggiunta | CVE | Prodotto e vulnerabilità | Scadenza federale | Segnalazioni | Nostra analisi |
|---|---|---|---|---|---|
| 2026-09-24 | CVE-2026-71362 | Commerce and Magento Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction. | 2026-09-27 | Triage forense | — |
| 2026-09-08 | CVE-2026-75650 | Commerce and Magento Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code. | 2026-09-11 | Triage forense | Leggi → |
| 2026-07-07 | CVE-2026-48282 | ColdFusion Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user. | 2026-07-10 | Triage forense | Leggi → |
| 2026-05-20 | CVE-2009-3459 | Acrobat and Reader Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption. | 2026-06-03 | — | |
| 2026-04-13 | CVE-2026-34621 | Acrobat and Reader Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution. | 2026-04-27 | — | |
| 2026-04-13 | CVE-2020-9715 | Acrobat Adobe Acrobat contains a use-after-free vulnerability that allows for code execution | 2026-04-27 | — | |
| 2025-10-24 | CVE-2025-54236 | Commerce and Magento Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API. | 2025-11-14 | — | |
| 2025-10-15 | CVE-2025-54253 | Experience Manager (AEM) Forms Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that allows for arbitrary code execution. | 2025-11-05 | — | |
| 2025-02-24 | CVE-2017-3066 | ColdFusion Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution. | 2025-03-17 | — | |
| 2024-12-16 | CVE-2024-20767 | ColdFusion Adobe ColdFusion contains an improper access control vulnerability that could allow an attacker to access or modify restricted files via an internet-exposed admin panel. | 2025-01-06 | — | |
| 2024-09-17 | CVE-2014-0502 | Flash Player Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code. | 2024-10-08 | — | |
| 2024-09-17 | CVE-2014-0497 | Flash Player Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code. | 2024-10-08 | — | |
| 2024-09-17 | CVE-2013-0648 | Flash Player Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content. | 2024-10-08 | — | |
| 2024-09-17 | CVE-2013-0643 | Flash Player Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content. | 2024-10-08 | — | |
| 2024-07-17 | CVE-2024-34102 | Commerce and Magento Open Source Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution. | 2024-08-07 | — | |
| 2024-01-08 | CVE-2023-38203 | ColdFusion Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution. | 2024-01-29 | Ransomware | — |
| 2024-01-08 | CVE-2023-29300 | ColdFusion Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution. | 2024-01-29 | Ransomware | — |
| 2023-10-10 | CVE-2023-21608 | Acrobat and Reader Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user. | 2023-10-31 | — | |
| 2023-09-14 | CVE-2023-26369 | Acrobat and Reader Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution. | 2023-10-05 | — | |
| 2023-08-21 | CVE-2023-26359 | ColdFusion Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user. | 2023-09-11 | — | |
| 2023-07-20 | CVE-2023-38205 | ColdFusion Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass. | 2023-08-10 | — | |
| 2023-07-20 | CVE-2023-29298 | ColdFusion Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass. | 2023-08-10 | — | |
| 2023-03-15 | CVE-2023-26360 | ColdFusion Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote code execution. | 2023-04-05 | — | |
| 2022-06-08 | CVE-2018-4990 | Acrobat and Reader Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution. | 2022-06-22 | — | |
| 2022-06-08 | CVE-2012-5054 | Flash Player Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments. | 2022-06-22 | — | |
| 2022-06-08 | CVE-2012-0767 | Flash Player Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML. | 2022-06-22 | — | |
| 2022-06-08 | CVE-2012-0754 | Flash Player Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). | 2022-06-22 | — | |
| 2022-06-08 | CVE-2011-2462 | Reader and Acrobat The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS). | 2022-06-22 | — | |
| 2022-06-08 | CVE-2011-0609 | Flash Player Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). | 2022-06-22 | — | |
| 2022-06-08 | CVE-2010-2883 | Acrobat and Reader Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). | 2022-06-22 | — | |
| 2022-06-08 | CVE-2010-1297 | Flash Player Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS). | 2022-06-22 | — | |
| 2022-06-08 | CVE-2009-4324 | Acrobat and Reader Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file. | 2022-06-22 | — | |
| 2022-06-08 | CVE-2009-3953 | Acrobat and Reader Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution. | 2022-06-22 | — | |
| 2022-06-08 | CVE-2009-1862 | Acrobat and Reader, Flash Player Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service (DoS). | 2022-06-22 | — | |
| 2022-06-08 | CVE-2008-0655 | Acrobat and Reader Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times. | 2022-06-22 | — | |
| 2022-06-08 | CVE-2007-5659 | Acrobat and Reader Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods. | 2022-06-22 | — | |
| 2022-05-25 | CVE-2016-1010 | Flash Player and AIR Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code. | 2022-06-15 | — | |
| 2022-05-25 | CVE-2016-0984 | Flash Player and AIR Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code. | 2022-06-15 | — | |
| 2022-05-25 | CVE-2015-8651 | Flash Player Integer overflow in Adobe Flash Player allows attackers to execute code. | 2022-06-15 | — | |
| 2022-05-25 | CVE-2015-0310 | Flash Player Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism. | 2022-06-15 | — |
Fonte: catalogo CISA Known Exploited Vulnerabilities (dati pubblici). Le descrizioni sono di CISA, abbreviate. Verifica sempre l'advisory del vendor prima di intervenire. cisa.gov
Prima della patch: tre verifiche
- 01Confronta la versione e la configurazione esatte che usi con l'advisory del vendor. Avere il prodotto non significa essere esposti.
- 02Verifica la raggiungibilità: una falla sfruttata su un'interfaccia raggiungibile da internet, o da una postazione compromessa, passa in testa alla coda.
- 03Dove CISA indica il triage forense, oltre alla patch cerca tracce di compromissione: la correzione non elimina un attaccante entrato prima.
Domande
Quante vulnerabilità Adobe ci sono nel catalogo CISA KEV?
82 nella versione 2026.10.21 del catalogo, la prima aggiunta il 2021-11-03 e la più recente il 2026-09-24. 7 sono state aggiunte negli ultimi 12 mesi.
Quali prodotti Adobe hanno più vulnerabilità sfruttate?
Per numero di voci KEV: Flash Player (33), ColdFusion (16), Acrobat and Reader (13), Reader and Acrobat (8), Commerce and Magento Open Source (2), Flash Player and AIR (2).
Le vulnerabilità Adobe sono usate negli attacchi ransomware?
CISA indica 11 delle 82 voci Adobe come note per l'uso in campagne ransomware. Nella tabella sono segnalate.
La prossima CVE Adobe è sfruttabile nella tua rete?
Una voce KEV dice che una vulnerabilità è sfruttata da qualche parte. Zero Hunt risponde se è sfruttabile nel tuo ambiente: un red team AI autonomo su un'appliance on-premise, con AI privata, in black box o gray box e con una persona che approva ogni passo che conta.
Altri vendor: Cisco · Microsoft · Fortinet · Linux kernel · Citrix · GitLab · Palo Alto Networks · Check Point · Langflow · Arista · Oracle · SonicWall · Ivanti · VMware · Zimbra · SAP · Atlassian · Zyxel · Progress · F5