{"meta":{"title":"KEV entries: Adobe","description":"All KEV entries for vendor Adobe.","source":"CISA Known Exploited Vulnerabilities catalog (https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json)","catalogVersion":"2026.09.23","catalogDateReleased":"2026-09-23T12:51:35.821Z","referenceDate":"2026-09-23","publisher":"Telemetry","license":"https://creativecommons.org/licenses/by/4.0/","documentation":"https://glide-telemetry.pages.dev/api/","records":81,"vendor":"Adobe","entries":81,"shareOfCatalogPercent":4.7,"ransomwareKnown":11,"firstDateAdded":"2021-11-03","latestDateAdded":"2026-09-08","rank":4},"data":[{"cveID":"CVE-2026-75650","vendorProject":"Adobe","product":"Commerce and Magento","vulnerabilityName":"Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability","dateAdded":"2026-09-08","dueDate":"2026-09-11","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-1336"],"shortDescription":"Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code.","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://helpx.adobe.com/security/products/magento/apsb26-146.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-75650","telemetryUrl":"https://glide-telemetry.pages.dev/kev/cve-2026-75650/"},{"cveID":"CVE-2026-48282","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Path Traversal Vulnerability","dateAdded":"2026-07-07","dueDate":"2026-07-10","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-22"],"shortDescription":"Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user.","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://helpx.adobe.com/security/products/coldfusion/apsb26-68.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-48282","telemetryUrl":"https://glide-telemetry.pages.dev/kev/cve-2026-48282/"},{"cveID":"CVE-2009-3459","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability","dateAdded":"2026-05-20","dueDate":"2026-06-03","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.cisa.gov/news-events/alerts/2009/10/13/adobe-reader-and-acrobat-vulnerabilities ; https://web.archive.org/web/20120324170253/http://www.adobe.com/support/security/bulletins/apsb09-15.html#:~:text=CVE%2D2009%2D3459).-,NOTE%3A,-There%20are%20reports ; https://nvd.nist.gov/vuln/detail/CVE-2009-3459","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2026/#cve-2009-3459"},{"cveID":"CVE-2026-34621","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Prototype Pollution Vulnerability","dateAdded":"2026-04-13","dueDate":"2026-04-27","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-1321"],"shortDescription":"Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/acrobat/apsb26-43.html ; https://nvd.nist.gov/vuln/detail/CVE-2026-34621","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2026/#cve-2026-34621"},{"cveID":"CVE-2020-9715","vendorProject":"Adobe","product":"Acrobat","vulnerabilityName":"Adobe Acrobat Use-After-Free Vulnerability","dateAdded":"2026-04-13","dueDate":"2026-04-27","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-416"],"shortDescription":"Adobe Acrobat contains a use-after-free vulnerability that allows for code execution","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/acrobat/apsb20-48.html ; https://nvd.nist.gov/vuln/detail/CVE-2020-9715","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2026/#cve-2020-9715"},{"cveID":"CVE-2025-54236","vendorProject":"Adobe","product":"Commerce and Magento","vulnerabilityName":"Adobe Commerce and Magento Improper Input Validation Vulnerability","dateAdded":"2025-10-24","dueDate":"2025-11-14","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://experienceleague.adobe.com/en/docs/experience-cloud-kcs/kbarticles/ka-27397 ; https://nvd.nist.gov/vuln/detail/CVE-2025-54236","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2025/#cve-2025-54236"},{"cveID":"CVE-2025-54253","vendorProject":"Adobe","product":"Experience Manager (AEM) Forms","vulnerabilityName":"Adobe Experience Manager Forms Code Execution Vulnerability","dateAdded":"2025-10-15","dueDate":"2025-11-05","knownRansomwareCampaignUse":"Unknown","cwes":[],"shortDescription":"Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that allows for arbitrary code execution.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/aem-forms/apsb25-82.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-54253","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2025/#cve-2025-54253"},{"cveID":"CVE-2017-3066","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Deserialization Vulnerability","dateAdded":"2025-02-24","dueDate":"2025-03-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-502"],"shortDescription":"Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/coldfusion/apsb17-14.html ; https://nvd.nist.gov/vuln/detail/CVE-2017-3066","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2025/#cve-2017-3066"},{"cveID":"CVE-2024-20767","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Improper Access Control Vulnerability","dateAdded":"2024-12-16","dueDate":"2025-01-06","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-284"],"shortDescription":"Adobe ColdFusion contains an improper access control vulnerability that could allow an attacker to access or modify restricted files via an internet-exposed admin panel.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/coldfusion/apsb24-14.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-20767","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2024-20767"},{"cveID":"CVE-2014-0502","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Double Free Vulnerablity","dateAdded":"2024-09-17","dueDate":"2024-10-08","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-399"],"shortDescription":"Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.","requiredAction":"The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","notes":"https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2014-0502","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2014-0502"},{"cveID":"CVE-2014-0497","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Integer Underflow Vulnerablity","dateAdded":"2024-09-17","dueDate":"2024-10-08","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-191"],"shortDescription":"Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.","requiredAction":"The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","notes":"https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2014-0497","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2014-0497"},{"cveID":"CVE-2013-0648","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Code Execution Vulnerability","dateAdded":"2024-09-17","dueDate":"2024-10-08","knownRansomwareCampaignUse":"Unknown","cwes":[],"shortDescription":"Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.","requiredAction":"The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","notes":"https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2013-0648","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2013-0648"},{"cveID":"CVE-2013-0643","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Incorrect Default Permissions Vulnerability","dateAdded":"2024-09-17","dueDate":"2024-10-08","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-264"],"shortDescription":"Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content. ","requiredAction":"The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","notes":"https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2013-0643","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2013-0643"},{"cveID":"CVE-2024-34102","vendorProject":"Adobe","product":"Commerce and Magento Open Source","vulnerabilityName":"Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability","dateAdded":"2024-07-17","dueDate":"2024-08-07","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-611"],"shortDescription":"Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/magento/apsb24-40.html;  https://nvd.nist.gov/vuln/detail/CVE-2024-34102","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2024-34102"},{"cveID":"CVE-2023-38203","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","dateAdded":"2024-01-08","dueDate":"2024-01-29","knownRansomwareCampaignUse":"Known","cwes":["CWE-502"],"shortDescription":"Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/coldfusion/apsb23-41.html ;  https://nvd.nist.gov/vuln/detail/CVE-2023-38203","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2023-38203"},{"cveID":"CVE-2023-29300","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","dateAdded":"2024-01-08","dueDate":"2024-01-29","knownRansomwareCampaignUse":"Known","cwes":["CWE-502"],"shortDescription":"Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/coldfusion/apsb23-40.html; https://nvd.nist.gov/vuln/detail/CVE-2023-29300","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2023-29300"},{"cveID":"CVE-2023-21608","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Use-After-Free Vulnerability","dateAdded":"2023-10-10","dueDate":"2023-10-31","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-416"],"shortDescription":"Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/acrobat/apsb23-01.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-21608","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2023-21608"},{"cveID":"CVE-2023-26369","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability","dateAdded":"2023-09-14","dueDate":"2023-10-05","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-787"],"shortDescription":"Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/acrobat/apsb23-34.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-26369","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2023-26369"},{"cveID":"CVE-2023-26359","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","dateAdded":"2023-08-21","dueDate":"2023-09-11","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-502"],"shortDescription":"Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-26359","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2023-26359"},{"cveID":"CVE-2023-38205","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Improper Access Control Vulnerability","dateAdded":"2023-07-20","dueDate":"2023-08-10","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-284"],"shortDescription":"Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/coldfusion/apsb23-47.html ;  https://nvd.nist.gov/vuln/detail/CVE-2023-38205","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2023-38205"},{"cveID":"CVE-2023-29298","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Improper Access Control Vulnerability","dateAdded":"2023-07-20","dueDate":"2023-08-10","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-284"],"shortDescription":"Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/coldfusion/apsb23-40.html; https://nvd.nist.gov/vuln/detail/CVE-2023-29298","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2023-29298"},{"cveID":"CVE-2023-26360","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","dateAdded":"2023-03-15","dueDate":"2023-04-05","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-284"],"shortDescription":"Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote code execution.","requiredAction":"Apply updates per vendor instructions.","notes":"https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-26360","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2023-26360"},{"cveID":"CVE-2018-4990","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Double Free Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-415"],"shortDescription":"Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-4990","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-4990"},{"cveID":"CVE-2012-5054","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Integer Overflow Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-189"],"shortDescription":"Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-5054","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2012-5054"},{"cveID":"CVE-2012-0767","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-79"],"shortDescription":"Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-0767","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2012-0767"},{"cveID":"CVE-2012-0754","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-787"],"shortDescription":"Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-0754","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2012-0754"},{"cveID":"CVE-2011-2462","vendorProject":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-787"],"shortDescription":"The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2011-2462","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2011-2462"},{"cveID":"CVE-2011-0609","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Unspecified Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomwareCampaignUse":"Unknown","cwes":[],"shortDescription":"Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2011-0609","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2011-0609"},{"cveID":"CVE-2010-2883","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-2883","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2010-2883"},{"cveID":"CVE-2010-1297","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-787"],"shortDescription":"Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-1297","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2010-1297"},{"cveID":"CVE-2009-4324","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Use-After-Free Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-399"],"shortDescription":"Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-4324","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2009-4324"},{"cveID":"CVE-2009-3953","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-3953","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2009-3953"},{"cveID":"CVE-2009-1862","vendorProject":"Adobe","product":"Acrobat and Reader, Flash Player","vulnerabilityName":"Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-94"],"shortDescription":"Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service (DoS).","requiredAction":"For Adobe Acrobat and Reader, apply updates per vendor instructions. For Adobe Flash Player, the impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-1862","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2009-1862"},{"cveID":"CVE-2008-0655","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Unspecified Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomwareCampaignUse":"Unknown","cwes":[],"shortDescription":"Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2008-0655","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2008-0655"},{"cveID":"CVE-2007-5659","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Buffer Overflow Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2007-5659","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2007-5659"},{"cveID":"CVE-2016-1010","vendorProject":"Adobe","product":"Flash Player and AIR","vulnerabilityName":"Adobe Flash Player and AIR Integer Overflow Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-190"],"shortDescription":"Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code.","requiredAction":"The impacted products are end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-1010","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2016-1010"},{"cveID":"CVE-2016-0984","vendorProject":"Adobe","product":"Flash Player and AIR","vulnerabilityName":"Adobe Flash Player and AIR Use-After-Free Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-416"],"shortDescription":"Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code.","requiredAction":"The impacted products are end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-0984","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2016-0984"},{"cveID":"CVE-2015-8651","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Integer Overflow Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-189"],"shortDescription":"Integer overflow in Adobe Flash Player allows attackers to execute code.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-8651","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2015-8651"},{"cveID":"CVE-2015-0310","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player ASLR Bypass Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-264"],"shortDescription":"Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0310","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2015-0310"},{"cveID":"CVE-2014-8439","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Dereferenced Pointer Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-8439","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2014-8439"},{"cveID":"CVE-2014-0546","vendorProject":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Acrobat Sandbox Bypass Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomwareCampaignUse":"Unknown","cwes":[],"shortDescription":"Adobe Reader and Acrobat on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-0546","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2014-0546"},{"cveID":"CVE-2018-5002","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-787"],"shortDescription":"Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-5002","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-5002"},{"cveID":"CVE-2015-5123","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-416"],"shortDescription":"Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-5123","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2015-5123"},{"cveID":"CVE-2015-5122","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-416"],"shortDescription":"Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-5122","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2015-5122"},{"cveID":"CVE-2015-3113","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-3113","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2015-3113"},{"cveID":"CVE-2015-0313","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-416"],"shortDescription":"Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0313","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2015-0313"},{"cveID":"CVE-2015-0311","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Remote Code Execution Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","knownRansomwareCampaignUse":"Unknown","cwes":[],"shortDescription":"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0311","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2015-0311"},{"cveID":"CVE-2014-9163","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Stack-Based Buffer Overflow Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","knownRansomwareCampaignUse":"Unknown","cwes":[],"shortDescription":"Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-9163","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2014-9163"},{"cveID":"CVE-2013-2729","vendorProject":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-189"],"shortDescription":"Integer overflow vulnerability in Adobe Reader and Acrobat allows attackers to execute remote code.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-2729","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2013-2729"},{"cveID":"CVE-2012-2034","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-2034","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2012-2034"},{"cveID":"CVE-2016-7892","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-416"],"shortDescription":"Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7892","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2016-7892"},{"cveID":"CVE-2016-4171","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomwareCampaignUse":"Unknown","cwes":[],"shortDescription":"Unspecified vulnerability in Adobe Flash Player allows for remote code execution.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-4171","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2016-4171"},{"cveID":"CVE-2010-2861","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Directory Traversal Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomwareCampaignUse":"Known","cwes":["CWE-22"],"shortDescription":"A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-2861","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2010-2861"},{"cveID":"CVE-2009-0927","vendorProject":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-0927","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2009-0927"},{"cveID":"CVE-2013-0631","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Information Disclosure Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-200"],"shortDescription":"Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-0631","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2013-0631"},{"cveID":"CVE-2013-0629","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Directory Traversal Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-264"],"shortDescription":"Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-0629","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2013-0629"},{"cveID":"CVE-2013-0625","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Authentication Bypass Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-255"],"shortDescription":"Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-0625","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2013-0625"},{"cveID":"CVE-2009-3960","vendorProject":"Adobe","product":"BlazeDS","vulnerabilityName":"Adobe BlazeDS Information Disclosure Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","knownRansomwareCampaignUse":"Known","cwes":[],"shortDescription":"Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-3960","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2009-3960"},{"cveID":"CVE-2017-11292","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Type Confusion Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-843"],"shortDescription":"Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-11292","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2017-11292"},{"cveID":"CVE-2016-7855","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-416"],"shortDescription":"Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7855","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2016-7855"},{"cveID":"CVE-2016-4117","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Known","cwes":[],"shortDescription":"An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-4117","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2016-4117"},{"cveID":"CVE-2016-1019","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Known","cwes":[],"shortDescription":"Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-1019","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2016-1019"},{"cveID":"CVE-2015-7645","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Known","cwes":[],"shortDescription":"Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-7645","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2015-7645"},{"cveID":"CVE-2015-5119","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-5119","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2015-5119"},{"cveID":"CVE-2015-3043","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-787"],"shortDescription":"A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-3043","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2015-3043"},{"cveID":"CVE-2014-0496","vendorProject":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Acrobat Use-After-Free Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-399"],"shortDescription":"Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-0496","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2014-0496"},{"cveID":"CVE-2013-3346","vendorProject":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Acrobat Memory Corruption Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-119"],"shortDescription":"Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-3346","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2013-3346"},{"cveID":"CVE-2013-0641","vendorProject":"Adobe","product":"Reader","vulnerabilityName":"Adobe Reader Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-120"],"shortDescription":"A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-0641","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2013-0641"},{"cveID":"CVE-2013-0640","vendorProject":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Acrobat Memory Corruption Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-787"],"shortDescription":"An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-0640","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2013-0640"},{"cveID":"CVE-2013-0632","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Authentication Bypass Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-200"],"shortDescription":"An authentication bypass vulnerability exists in Adobe ColdFusion which could result in an unauthorized user gaining administrative access.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-0632","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2013-0632"},{"cveID":"CVE-2012-1535","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":[],"shortDescription":"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-1535","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2012-1535"},{"cveID":"CVE-2011-0611","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-843"],"shortDescription":"Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2011-0611","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2011-0611"},{"cveID":"CVE-2010-0188","vendorProject":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Known","cwes":["CWE-94"],"shortDescription":"Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-0188","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2010-0188"},{"cveID":"CVE-2008-2992","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Reader and Acrobat Input Validation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Known","cwes":["CWE-119"],"shortDescription":"Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2008-2992","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2008-2992"},{"cveID":"CVE-2022-24086","vendorProject":"Adobe","product":"Commerce and Magento Open Source","vulnerabilityName":"Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability","dateAdded":"2022-02-15","dueDate":"2022-03-01","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-20"],"shortDescription":"Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-24086","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2022-24086"},{"cveID":"CVE-2018-15982","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2022-02-15","dueDate":"2022-08-15","knownRansomwareCampaignUse":"Known","cwes":["CWE-416"],"shortDescription":"Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-15982","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-15982"},{"cveID":"CVE-2021-28550","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-416"],"shortDescription":"Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-28550","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2021-28550"},{"cveID":"CVE-2021-21017","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-122"],"shortDescription":"Acrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-21017","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2021-21017"},{"cveID":"CVE-2018-4939","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-502"],"shortDescription":"Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could allow for code execution.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-4939","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2018-4939"},{"cveID":"CVE-2018-4878","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Known","cwes":["CWE-416"],"shortDescription":"Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-4878","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2018-4878"},{"cveID":"CVE-2018-15961","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Unrestricted File Upload Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-434"],"shortDescription":"Adobe ColdFusion contains an unrestricted file upload vulnerability that could allow for code execution.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-15961","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2018-15961"}]}