Vulnerabilities > Adobe

DATE CVE VULNERABILITY TITLE RISK
2021-05-27 CVE-2020-10145 Incorrect Default Permissions vulnerability in Adobe Coldfusion 2016/2018/2021
The Adobe ColdFusion installer fails to set a secure access-control list (ACL) on the default installation directory, such as C:\ColdFusion2021\.
local
low complexity
adobe CWE-276
7.8
2021-04-19 CVE-2021-21070 Unspecified vulnerability in Adobe Robohelp
Adobe Robohelp version 2020.0.3 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation.
local
low complexity
adobe
6.5
2021-04-16 CVE-2020-9681 Unspecified vulnerability in Adobe Genuine Service
Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability.
local
low complexity
adobe
6.5
2021-04-16 CVE-2020-9668 Unspecified vulnerability in Adobe Genuine Service
Adobe Genuine Service version 6.6 (and earlier) is affected by an Improper Access control vulnerability when handling symbolic links.
local
low complexity
adobe
7.8
2021-04-16 CVE-2020-9667 Unspecified vulnerability in Adobe Genuine Service
Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability.
local
low complexity
adobe
6.5
2021-04-15 CVE-2021-28549 Unspecified vulnerability in Adobe Photoshop
Adobe Photoshop versions 21.2.6 (and earlier) and 22.3 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted JSX file.
local
low complexity
adobe
7.8
2021-04-15 CVE-2021-21096 Unspecified vulnerability in Adobe Bridge
Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Improper Authorization vulnerability in the Genuine Software Service.
local
low complexity
adobe
5.5
2021-04-15 CVE-2021-21087 Unspecified vulnerability in Adobe Coldfusion 2016/2018/2021.0.0.323925
Adobe Coldfusion versions 2016 (update 16 and earlier), 2018 (update 10 and earlier) and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability.
network
low complexity
adobe
5.4
2021-04-01 CVE-2021-28546 Unspecified vulnerability in Adobe products
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are missing support for an integrity check.
network
low complexity
adobe
6.5
2021-03-12 CVE-2021-21085 Unspecified vulnerability in Adobe Connect
Adobe Connect version 11.0.7 (and earlier) is affected by an Input Validation vulnerability in the export feature.
local
low complexity
adobe
7.8