Vulnerabilities in Adobe ColdFusion, Commerce (Magento), Reader, and Acrobat — a product line whose enterprise footprint keeps it in the KEV catalog and in attacker toolkits well past its perceived relevance. Combined article + CVE feed for the Adobe beat.https://0daynews.com/en-ushttps://0daynews.com/cve/cve-2007-5659/https://0daynews.com/cve/cve-2007-5659/Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long arguments to unspecified JavaScript methods.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2008-0655/https://0daynews.com/cve/cve-2008-0655/Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to be printed silently an arbitrary number of times.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2008-2992/https://0daynews.com/cve/cve-2008-2992/Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2009-0927/https://0daynews.com/cve/cve-2009-0927/Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2009-1862/https://0daynews.com/cve/cve-2009-1862/Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service (DoS).Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2009-3459/https://0daynews.com/cve/cve-2009-3459/Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2009-3953/https://0daynews.com/cve/cve-2009-3953/Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2009-3960/https://0daynews.com/cve/cve-2009-3960/Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.Sun, 23 Aug 2026 00:00:00 GMTAdobemediumcvehttps://0daynews.com/cve/cve-2009-4324/https://0daynews.com/cve/cve-2009-4324/Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2010-0188/https://0daynews.com/cve/cve-2010-0188/Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2010-1297/https://0daynews.com/cve/cve-2010-1297/Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2010-2861/https://0daynews.com/cve/cve-2010-2861/A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2010-2883/https://0daynews.com/cve/cve-2010-2883/Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2011-0609/https://0daynews.com/cve/cve-2011-0609/Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2011-0611/https://0daynews.com/cve/cve-2011-0611/Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2011-2462/https://0daynews.com/cve/cve-2011-2462/The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2012-0754/https://0daynews.com/cve/cve-2012-0754/Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2012-0767/https://0daynews.com/cve/cve-2012-0767/Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.Sun, 23 Aug 2026 00:00:00 GMTAdobemediumcvehttps://0daynews.com/cve/cve-2012-1535/https://0daynews.com/cve/cve-2012-1535/Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2012-2034/https://0daynews.com/cve/cve-2012-2034/Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2012-5054/https://0daynews.com/cve/cve-2012-5054/Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2013-0625/https://0daynews.com/cve/cve-2013-0625/Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2013-0629/https://0daynews.com/cve/cve-2013-0629/Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2013-0631/https://0daynews.com/cve/cve-2013-0631/Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2013-0632/https://0daynews.com/cve/cve-2013-0632/An authentication bypass vulnerability exists in Adobe ColdFusion which could result in an unauthorized user gaining administrative access.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2013-0640/https://0daynews.com/cve/cve-2013-0640/An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2013-0641/https://0daynews.com/cve/cve-2013-0641/A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2013-0643/https://0daynews.com/cve/cve-2013-0643/Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content. Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2013-0648/https://0daynews.com/cve/cve-2013-0648/Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2013-2729/https://0daynews.com/cve/cve-2013-2729/Integer overflow vulnerability in Adobe Reader and Acrobat allows attackers to execute remote code.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2013-3346/https://0daynews.com/cve/cve-2013-3346/Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2014-0496/https://0daynews.com/cve/cve-2014-0496/Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2014-0497/https://0daynews.com/cve/cve-2014-0497/Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2014-0502/https://0daynews.com/cve/cve-2014-0502/Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2014-0546/https://0daynews.com/cve/cve-2014-0546/Adobe Reader and Acrobat on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2014-8439/https://0daynews.com/cve/cve-2014-8439/Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2014-9163/https://0daynews.com/cve/cve-2014-9163/Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2015-0310/https://0daynews.com/cve/cve-2015-0310/Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2015-0311/https://0daynews.com/cve/cve-2015-0311/Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2015-0313/https://0daynews.com/cve/cve-2015-0313/Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2015-3043/https://0daynews.com/cve/cve-2015-3043/A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2015-3113/https://0daynews.com/cve/cve-2015-3113/Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2015-5119/https://0daynews.com/cve/cve-2015-5119/A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2015-5122/https://0daynews.com/cve/cve-2015-5122/Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2015-5123/https://0daynews.com/cve/cve-2015-5123/Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2015-7645/https://0daynews.com/cve/cve-2015-7645/Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2015-8651/https://0daynews.com/cve/cve-2015-8651/Integer overflow in Adobe Flash Player allows attackers to execute code.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2016-0984/https://0daynews.com/cve/cve-2016-0984/Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2016-1010/https://0daynews.com/cve/cve-2016-1010/Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2016-1019/https://0daynews.com/cve/cve-2016-1019/Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2016-4117/https://0daynews.com/cve/cve-2016-4117/An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2016-4171/https://0daynews.com/cve/cve-2016-4171/Unspecified vulnerability in Adobe Flash Player allows for remote code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2016-7855/https://0daynews.com/cve/cve-2016-7855/Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2016-7892/https://0daynews.com/cve/cve-2016-7892/Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2017-11292/https://0daynews.com/cve/cve-2017-11292/Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2017-3066/https://0daynews.com/cve/cve-2017-3066/Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2018-15961/https://0daynews.com/cve/cve-2018-15961/Adobe ColdFusion contains an unrestricted file upload vulnerability that could allow for code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2018-15982/https://0daynews.com/cve/cve-2018-15982/Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free VulnerabilitySun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2018-4878/https://0daynews.com/cve/cve-2018-4878/Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2018-4939/https://0daynews.com/cve/cve-2018-4939/Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could allow for code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2018-4990/https://0daynews.com/cve/cve-2018-4990/Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2018-5002/https://0daynews.com/cve/cve-2018-5002/Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2020-9715/https://0daynews.com/cve/cve-2020-9715/Adobe Acrobat contains a use-after-free vulnerability that allows for code executionSun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2021-21017/https://0daynews.com/cve/cve-2021-21017/Acrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2021-28550/https://0daynews.com/cve/cve-2021-28550/Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2022-24086/https://0daynews.com/cve/cve-2022-24086/Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2023-21608/https://0daynews.com/cve/cve-2023-21608/Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2023-26359/https://0daynews.com/cve/cve-2023-26359/Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2023-26360/https://0daynews.com/cve/cve-2023-26360/Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2023-26369/https://0daynews.com/cve/cve-2023-26369/Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2023-29298/https://0daynews.com/cve/cve-2023-29298/Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2023-29300/https://0daynews.com/cve/cve-2023-29300/Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2023-38203/https://0daynews.com/cve/cve-2023-38203/Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2023-38205/https://0daynews.com/cve/cve-2023-38205/Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2024-20767/https://0daynews.com/cve/cve-2024-20767/Adobe ColdFusion contains an improper access control vulnerability that could allow an attacker to access or modify restricted files via an internet-exposed admin panel.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2024-34102/https://0daynews.com/cve/cve-2024-34102/Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2025-54236/https://0daynews.com/cve/cve-2025-54236/Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2025-54253/https://0daynews.com/cve/cve-2025-54253/Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that allows for arbitrary code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2026-34621/https://0daynews.com/cve/cve-2026-34621/Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2026-48282/https://0daynews.com/cve/cve-2026-48282/Unauthenticated path-traversal (CWE-22) in Adobe ColdFusion 2023 (through update 20) and 2025 (through update 9) permitting arbitrary code execution without user interaction. CVSS 10.0. Patched by Adobe on 2026-07-01 in APSB26-68 (ColdFusion 2023 update 21, 2025 update 10). Active in-the-wild exploitation confirmed by the Canadian Centre for Cyber Security on 2026-07-02; Shadowserver counts ~800 exposed instances.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2026-48284/https://0daynews.com/cve/cve-2026-48284/Input-validation failure in Adobe ColdFusion enables unauthenticated remote code execution. Patched in ColdFusion 2025 Update 11 and ColdFusion 2023 Update 22.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2026-48294/https://0daynews.com/cve/cve-2026-48294/CVE-2026-48294: cross-context flaw in the Adobe Acrobat Chrome extension let any site silently read WhatsApp Web data. CVSS 7.4; patched by Adobe.Sun, 23 Aug 2026 00:00:00 GMTAdobehighcvehttps://0daynews.com/cve/cve-2026-48318/https://0daynews.com/cve/cve-2026-48318/Path-traversal vulnerability in Adobe ColdFusion that could result in arbitrary code execution. The highest-scored CVE in Adobe's July 2026 ColdFusion cluster. Fixed in ColdFusion 2025 Update 11 and ColdFusion 2023 Update 22.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2026-48319/https://0daynews.com/cve/cve-2026-48319/Path traversal in Adobe ColdFusion allows an unauthenticated remote attacker to read arbitrary files on the server. Patched in ColdFusion 2025 Update 11 and 2023 Update 22.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2026-48321/https://0daynews.com/cve/cve-2026-48321/Authorization bypass in Adobe ColdFusion allows an unauthenticated attacker to bypass access controls. Patched in ColdFusion 2025 Update 11 and 2023 Update 22.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2026-48322/https://0daynews.com/cve/cve-2026-48322/Code injection in Adobe ColdFusion allows unauthenticated remote code execution. Patched in ColdFusion 2025 Update 11 and ColdFusion 2023 Update 22.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2026-48325/https://0daynews.com/cve/cve-2026-48325/Missing authentication check in Adobe ColdFusion allows unauthenticated attackers to access protected functionality. Patched in ColdFusion 2025 Update 11 and 2023 Update 22.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2026-48449/https://0daynews.com/cve/cve-2026-48449/Incorrect authorization flaw in Adobe Campaign Classic scores CVSS 10.0, enabling unauthenticated remote code execution without user interaction. Adobe has patched.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/cve/cve-2026-71362/https://0daynews.com/cve/cve-2026-71362/Adobe Commerce and Magento Open Source contain an incorrect authorization flaw enabling privilege escalation to sensitive resources. CVSS 9.1 critical. Actively exploited in wild.Sun, 23 Aug 2026 00:00:00 GMTAdobecriticalcvehttps://0daynews.com/articles/2026-08-12-adobe-commerce-cve-2026-71362-active-exploit/https://0daynews.com/articles/2026-08-12-adobe-commerce-cve-2026-71362-active-exploit/Active exploitation of CVE-2026-71362 targets Adobe Commerce and Magento storefronts. CVSS 9.1 critical flaw enables account hijacking without user interaction.Wed, 12 Aug 2026 22:00:00 GMTAdobearticlehttps://0daynews.com/articles/2026-08-11-adobe-coldfusion-campaign-classic-aug-patches/https://0daynews.com/articles/2026-08-11-adobe-coldfusion-campaign-classic-aug-patches/Adobe patches critical RCE and DoS flaws in ColdFusion and Campaign Classic. Arbitrary code execution risk confirmed. Adobe explicitly urges immediate patching — act now.Tue, 11 Aug 2026 18:00:00 GMTAdobearticlehttps://0daynews.com/articles/2026-08-01-adobe-campaign-classic-cvss-10-rce/https://0daynews.com/articles/2026-08-01-adobe-campaign-classic-cvss-10-rce/Adobe patched CVE-2026-48449, a CVSS 10.0 incorrect authorization flaw in Campaign Classic that enables remote code execution without user interaction.Sat, 01 Aug 2026 08:00:00 GMTAdobearticlehttps://0daynews.com/articles/2026-07-22-adobe-acrobat-chrome-extension-whatsapp-web-data-access/https://0daynews.com/articles/2026-07-22-adobe-acrobat-chrome-extension-whatsapp-web-data-access/CVE-2026-48294 in the Adobe Acrobat Chrome extension let any site access WhatsApp Web data without authentication. Adobe has patched it — update now.Wed, 22 Jul 2026 17:30:00 GMTAdobearticlehttps://0daynews.com/articles/2026-07-08-cisa-coldfusion-cve-2026-48282-kev-friday-deadline/https://0daynews.com/articles/2026-07-08-cisa-coldfusion-cve-2026-48282-kev-friday-deadline/CISA added Adobe ColdFusion CVE-2026-48282 to KEV on July 7 and set a July 10 federal patch deadline under BOD 26-04. CVSS 10.0. Actively exploited.Wed, 08 Jul 2026 11:00:00 GMTAdobearticlehttps://0daynews.com/articles/2026-07-06-adobe-coldfusion-cve-2026-48282-active-exploitation/https://0daynews.com/articles/2026-07-06-adobe-coldfusion-cve-2026-48282-active-exploitation/A max-severity unauthenticated path-traversal-to-RCE in ColdFusion 2023 and 2025 is under active attack. Adobe's 72-hour patch window has already passed. Shadowserver counts ~800 exposed instances.Mon, 06 Jul 2026 14:15:00 GMTAdobearticle