adobe creative cloud

Name: adobe creative cloud
Brand: adobe

productUS

cpe:2.3:a:adobe:creative_cloud:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

7critical13high2medium0low

updated 2026-10-28

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-3006US	high8.8	10.8% (96th)	Exploit	no fix	2017-04-12	≤ 3.9.5.353
CVE-2019-7959US	critical9.8	6.53% (94th)	—	no fix	2019-08-16	≤ 4.6.1
CVE-2018-12829US	critical9.8	5.07% (92nd)	—	4.6.1	2018-08-29	< 4.6.1
CVE-2018-5003US	high7.8	4.87% (92nd)	—	4.5.5.342	2018-08-29	< 4.5.5.342
CVE-2019-7958US	critical9.8	4.35% (91st)	—	no fix	2019-08-16	≤ 4.6.1
CVE-2018-4991US	critical9.8	3.88% (90th)	—	no fix	2018-05-19	≤ 4.4.1.298
CVE-2019-8063US	high7.5	3.67% (90th)	—	no fix	2019-08-16	≤ 4.6.1
CVE-2019-7957US	high7.5	3.67% (90th)	—	no fix	2019-08-16	≤ 4.6.1
CVE-2020-9669US	critical9.8	3.44% (89th)	—	no fix	2020-07-17	≤ 5.1
CVE-2019-8236US	critical9.8	3.36% (89th)	—	no fix	2019-10-23	≤ 4.6.1
CVE-2019-7093US	high7.8	3.28% (88th)	—	no fix	2019-05-24	≤ 4.7.0.400
CVE-2020-24422US	high7.8	3.08% (88th)	—	no fix	2020-10-21	2 versions
CVE-2016-4158US	high7.3	3.02% (87th)	—	no fix	2016-06-16	≤ 3.6.0.248
CVE-2016-1034US	critical9.1	2.77% (86th)	—	no fix	2016-04-12	≤ 3.5.1.209
CVE-2020-3808US	medium5.9	1.39% (72nd)	—	no fix	2020-03-25	≤ 5.0
CVE-2018-4873US	high7.8	1.06% (65th)	—	no fix	2018-05-19	≤ 4.4.1.298
CVE-2021-28581US	medium4.4	0.86% (58th)	—	no fix	2021-09-08	≤ 5.3
CVE-2018-4992US	high7.8	0.85% (58th)	—	no fix	2018-05-19	≤ 4.4.1.298
CVE-2016-6935US	high7.8	0.77% (55th)	—	no fix	2016-10-13	≤ 3.7.0.272
CVE-2017-3007US	high7.8	0.72% (54th)	—	no fix	2017-04-12	≤ 3.9.5.353
CVE-2016-4157US	high7.3	0.71% (53rd)	—	no fix	2016-06-16	≤ 3.6.0.248
CVE-2023-26358US	high7.8	0.36% (29th)	—	5.10	2023-03-22	< 5.10
CVE-2025-64896US	—	0.18% (8th)	—	6.8.0.821	2025-12-09	< 6.8.0.821
CVE-2025-54271US	—	0.14% (4th)	—	6.8.0.821	2025-10-15	< 6.8.0.821

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation3 CVEs
CWE-426Untrusted Search Path3 CVEs
CWE-427Uncontrolled Search Path Element3 CVEs
CWE-264CWE-2642 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-295Improper Certificate Validation2 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition2 CVEs
CWE-428Unquoted Search Path or Element2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan