Skip to content

Adobe · weakness class

Denial of Service

99 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
14

Every one of the 99 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service (NULL pointer dereference…CVE-2008-4546Adobe · 66% likely

    CWE-399

  2. Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information…CVE-2016-4232Adobe · 36% likely

    CWE-401

  3. The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of service (memory corruption)…CVE-2009-1492Adobe · 26% likely

    CWE-399

  4. The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and UNIX allows remote attackers to cause a denial of service (…CVE-2009-1493Adobe · 22% likely

    CWE-399

  5. Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)CVE-2026-34648Adobe · CVSS 7.5 · 21% likely

    CWE-400

  6. Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute arbitrary code via a crafted PDF document that (1) performs unspecified actions on…CVE-2008-4813Adobe · 17% likely

    CWE-399

  7. Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted JPC_MS_RGN marker in the Jp2c…CVE-2009-3955Adobe · 16% likely

    CWE-399

  8. Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)CVE-2026-34650Adobe · CVSS 7.5 · 15% likely

    CWE-400

  9. Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file with crafted Flash content involv…CVE-2010-2201Adobe · 14% likely

    CWE-399

  10. Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file with crafted Flash content, invol…CVE-2010-2168Adobe · 14% likely

    CWE-399

  11. Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)CVE-2026-34649Adobe · CVSS 7.5 · 14% likely

    CWE-400

  12. Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers to execute arbitrary code via unspecified…CVE-2014-0527Adobe · 13% likely

    CWE-399

  13. Use-after-free vulnerability in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a crafted TIFF (aka .TI…CVE-2012-2027Adobe · 13% likely

    CWE-399

  14. Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allow attackers to cause a denial of service (memory corruption) or possibly execute arbi…CVE-2009-2983Adobe · 12% likely

    CWE-399

  15. Adobe Reader and Acrobat 7.0.8 and earlier allows user-assisted remote attackers to execute code via a crafted PDF file that triggers memory corruption and overwrites a subroutine…CVE-2006-5857Adobe · 9.4% likely

    CWE-399

  16. Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memor…CVE-2009-3793Adobe · 9.4% likely

    CWE-399

  17. The JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attacker…CVE-2009-1858Adobe · 8.8% likely

    CWE-399

  18. Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before…CVE-2013-1374Adobe · 8.5% likely

    CWE-399

  19. Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before…CVE-2013-0649Adobe · 8.5% likely

    CWE-399

  20. Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before…CVE-2013-0644Adobe · 8.5% likely

    CWE-399

  21. Use-after-free vulnerability in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allows remote attackers to execute arbitrar…CVE-2007-6148Adobe · 8.4% likely

    CWE-399

  22. Use-after-free vulnerability in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified ve…CVE-2013-0602Adobe · 8.0% likely

    CWE-399

  23. Use-after-free vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR…CVE-2014-0506Adobe · 7.6% likely

    CWE-399

  24. Use-after-free vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code v…CVE-2010-2164Adobe · 7.4% likely

    CWE-399

  25. Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow attackers to execute arbitrary code…CVE-2009-1859Adobe · 7.2% likely

    CWE-399

  26. Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allow attackers to cause a denial of service (m…CVE-2009-1857Adobe · 7.2% likely

    CWE-399

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.