{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T16:23:59.585Z",
  "tag": {
    "id": "adobe",
    "label": "Adobe",
    "isStack": false,
    "url": "https://pwn.watch/t/adobe",
    "feed": "https://pwn.watch/t/adobe/feed.xml"
  },
  "counts": {
    "incidents": 16,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 15
  },
  "incidents": [
    {
      "slug": "adobe-commerce-and-magento-cve-2026-71362",
      "title": "Adobe Commerce and Magento : Adobe Commerce and Magento Incorrect Authorization Vulnerability ",
      "url": "https://pwn.watch/i/adobe-commerce-and-magento-cve-2026-71362",
      "json": "https://pwn.watch/i/adobe-commerce-and-magento-cve-2026-71362.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Adobe Commerce and Magento ",
      "tags": [
        "php",
        "adobe",
        "magento",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2026-71362"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-09-24",
      "closedAt": "2026-09-24",
      "updatedAt": "2026-09-24",
      "summary": "Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction. Added to CISA KEV on 2026-09-24.",
      "xPost": null
    },
    {
      "slug": "adobe-commerce-and-magento-cve-2026-75650",
      "title": "Adobe Commerce and Magento: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability",
      "url": "https://pwn.watch/i/adobe-commerce-and-magento-cve-2026-75650",
      "json": "https://pwn.watch/i/adobe-commerce-and-magento-cve-2026-75650.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Adobe Commerce and Magento",
      "tags": [
        "php",
        "adobe",
        "magento",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2026-75650"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-09-08",
      "closedAt": "2026-09-08",
      "updatedAt": "2026-09-08",
      "summary": "Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code. Added to CISA KEV on 2026-09-08.",
      "xPost": null
    },
    {
      "slug": "adobe-coldfusion-cve-2026-48282",
      "title": "Adobe ColdFusion: Adobe ColdFusion Path Traversal Vulnerability",
      "url": "https://pwn.watch/i/adobe-coldfusion-cve-2026-48282",
      "json": "https://pwn.watch/i/adobe-coldfusion-cve-2026-48282.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Adobe ColdFusion",
      "tags": [
        "adobe",
        "coldfusion",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2026-48282"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-07-07",
      "closedAt": "2026-07-07",
      "updatedAt": "2026-07-07",
      "summary": "Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user. Added to CISA KEV on 2026-07-07.",
      "xPost": null
    },
    {
      "slug": "adobe-acrobat-and-reader-cve-2026-34621",
      "title": "Adobe Acrobat and Reader: Adobe Acrobat and Reader Prototype Pollution Vulnerability",
      "url": "https://pwn.watch/i/adobe-acrobat-and-reader-cve-2026-34621",
      "json": "https://pwn.watch/i/adobe-acrobat-and-reader-cve-2026-34621.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Adobe Acrobat and Reader",
      "tags": [
        "adobe",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2026-34621"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-04-13",
      "closedAt": "2026-04-13",
      "updatedAt": "2026-04-13",
      "summary": "Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution. Added to CISA KEV on 2026-04-13.",
      "xPost": null
    },
    {
      "slug": "adobe-commerce-and-magento-cve-2025-54236",
      "title": "Adobe Commerce and Magento: Commerce and Magento Improper Input Validation Vulnerability",
      "url": "https://pwn.watch/i/adobe-commerce-and-magento-cve-2025-54236",
      "json": "https://pwn.watch/i/adobe-commerce-and-magento-cve-2025-54236.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Adobe Commerce and Magento",
      "tags": [
        "php",
        "adobe",
        "magento",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-54236"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-10-24",
      "closedAt": "2025-10-24",
      "updatedAt": "2025-10-24",
      "summary": "Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API. Added to CISA KEV on 2025-10-24.",
      "xPost": null
    },
    {
      "slug": "adobe-experience-manager-aem-forms-cve-2025-54253",
      "title": "Adobe Experience Manager (AEM) Forms: Experience Manager Forms Code Execution Vulnerability",
      "url": "https://pwn.watch/i/adobe-experience-manager-aem-forms-cve-2025-54253",
      "json": "https://pwn.watch/i/adobe-experience-manager-aem-forms-cve-2025-54253.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Adobe Experience Manager (AEM) Forms",
      "tags": [
        "adobe",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-54253"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-10-15",
      "closedAt": "2025-10-15",
      "updatedAt": "2025-10-15",
      "summary": "Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that allows for arbitrary code execution. Added to CISA KEV on 2025-10-15.",
      "xPost": null
    },
    {
      "slug": "adobe-coldfusion-cve-2017-3066",
      "title": "Adobe ColdFusion: ColdFusion Deserialization Vulnerability",
      "url": "https://pwn.watch/i/adobe-coldfusion-cve-2017-3066",
      "json": "https://pwn.watch/i/adobe-coldfusion-cve-2017-3066.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Adobe ColdFusion",
      "tags": [
        "adobe",
        "coldfusion",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2017-3066"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-02-24",
      "closedAt": "2025-02-24",
      "updatedAt": "2025-02-24",
      "summary": "Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution. Added to CISA KEV on 2025-02-24.",
      "xPost": null
    },
    {
      "slug": "adobe-flash-player-cve-2013-0643-cve-2013-0648",
      "title": "Adobe Flash Player: 4 actively exploited vulnerabilities",
      "url": "https://pwn.watch/i/adobe-flash-player-cve-2013-0643-cve-2013-0648",
      "json": "https://pwn.watch/i/adobe-flash-player-cve-2013-0643-cve-2013-0648.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "unpatched",
      "product": "Adobe Flash Player",
      "tags": [
        "adobe",
        "flash-player",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2013-0643",
        "CVE-2013-0648",
        "CVE-2014-0497",
        "CVE-2014-0502"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "No fix: CISA says the product is end-of-life and should be retired"
      ],
      "startedAt": "2024-09-17",
      "closedAt": "2024-09-17",
      "updatedAt": "2024-09-17",
      "summary": "CVE-2013-0643: Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content. CVE-2013-0648: Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content. CVE-2014-0497: Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code. CVE-2014-0502: Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code. Added to the CISA KEV catalog on 2024-09-17. CVE-2013-0643, CVE-2013-0648, CVE-2014-0497, CVE-2014-0502 were assigned before 2024; the KEV listing came in 2024.",
      "xPost": null
    },
    {
      "slug": "adobe-commerce-and-magento-open-source-cve-2024-34102",
      "title": "Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE)",
      "url": "https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102",
      "json": "https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Adobe Commerce and Magento Open Source",
      "tags": [
        "php",
        "adobe",
        "magento",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2024-34102"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-06-13",
      "closedAt": "2024-07-17",
      "updatedAt": "2024-07-17",
      "summary": "Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution. Added to the CISA KEV catalog on 2024-07-17.",
      "xPost": null
    },
    {
      "slug": "adobe-coldfusion-cve-2024-20767",
      "title": "Adobe ColdFusion Improper Access Control",
      "url": "https://pwn.watch/i/adobe-coldfusion-cve-2024-20767",
      "json": "https://pwn.watch/i/adobe-coldfusion-cve-2024-20767.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Adobe ColdFusion",
      "tags": [
        "adobe",
        "coldfusion",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-20767"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-03-18",
      "closedAt": "2024-12-16",
      "updatedAt": "2024-12-16",
      "summary": "Adobe ColdFusion contains an improper access control vulnerability that could allow an attacker to access or modify restricted files via an internet-exposed admin panel. Added to the CISA KEV catalog on 2024-12-16.",
      "xPost": null
    },
    {
      "slug": "adobe-coldfusion-cve-2023-29300-38203",
      "title": "Adobe ColdFusion: 2 actively exploited vulnerabilities",
      "url": "https://pwn.watch/i/adobe-coldfusion-cve-2023-29300-38203",
      "json": "https://pwn.watch/i/adobe-coldfusion-cve-2023-29300-38203.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Adobe ColdFusion",
      "tags": [
        "adobe",
        "coldfusion",
        "cisa-kev",
        "ransomware"
      ],
      "cveIds": [
        "CVE-2023-29300",
        "CVE-2023-38203"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-01-08",
      "closedAt": "2024-01-08",
      "updatedAt": "2024-01-08",
      "summary": "CVE-2023-29300: Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution. CVE-2023-38203: Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution. Added to the CISA KEV catalog on 2024-01-08. CISA lists known use in ransomware campaigns. CVE-2023-29300, CVE-2023-38203 were assigned before 2024; the KEV listing came in 2024.",
      "xPost": null
    },
    {
      "slug": "adobe-acrobat-and-reader-cve-2023-21608",
      "title": "Adobe Acrobat and Reader: Use-After-Free (CVE-2023-21608)",
      "url": "https://pwn.watch/i/adobe-acrobat-and-reader-cve-2023-21608",
      "json": "https://pwn.watch/i/adobe-acrobat-and-reader-cve-2023-21608.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Adobe Acrobat and Reader",
      "tags": [
        "adobe",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-21608"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-10-10",
      "closedAt": "2023-10-10",
      "updatedAt": "2023-10-10",
      "summary": "Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user. Added to CISA KEV on 2023-10-10.",
      "xPost": null
    },
    {
      "slug": "adobe-acrobat-and-reader-cve-2023-26369",
      "title": "Adobe Acrobat and Reader: Out-of-Bounds Write (CVE-2023-26369)",
      "url": "https://pwn.watch/i/adobe-acrobat-and-reader-cve-2023-26369",
      "json": "https://pwn.watch/i/adobe-acrobat-and-reader-cve-2023-26369.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Adobe Acrobat and Reader",
      "tags": [
        "adobe",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-26369"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-09-14",
      "closedAt": "2023-09-14",
      "updatedAt": "2023-09-14",
      "summary": "Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution. Added to CISA KEV on 2023-09-14.",
      "xPost": null
    },
    {
      "slug": "adobe-coldfusion-cve-2023-26359",
      "title": "Adobe ColdFusion: Deserialization of Untrusted Data (CVE-2023-26359)",
      "url": "https://pwn.watch/i/adobe-coldfusion-cve-2023-26359",
      "json": "https://pwn.watch/i/adobe-coldfusion-cve-2023-26359.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Adobe ColdFusion",
      "tags": [
        "adobe",
        "coldfusion",
        "cisa-kev",
        "deserialization"
      ],
      "cveIds": [
        "CVE-2023-26359"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-08-21",
      "closedAt": "2023-08-21",
      "updatedAt": "2023-08-21",
      "summary": "Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user. Added to CISA KEV on 2023-08-21.",
      "xPost": null
    },
    {
      "slug": "adobe-coldfusion-cve-2023-29298-38205",
      "title": "Adobe ColdFusion: 2 exploited vulnerabilities (CVE-2023-29298, CVE-2023-38205)",
      "url": "https://pwn.watch/i/adobe-coldfusion-cve-2023-29298-38205",
      "json": "https://pwn.watch/i/adobe-coldfusion-cve-2023-29298-38205.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Adobe ColdFusion",
      "tags": [
        "adobe",
        "coldfusion",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-29298",
        "CVE-2023-38205"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-07-20",
      "closedAt": "2023-07-20",
      "updatedAt": "2023-07-20",
      "summary": "Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass. Added to CISA KEV on 2023-07-20.",
      "xPost": null
    },
    {
      "slug": "adobe-coldfusion-cve-2023-26360",
      "title": "Adobe ColdFusion: Deserialization of Untrusted Data (CVE-2023-26360)",
      "url": "https://pwn.watch/i/adobe-coldfusion-cve-2023-26360",
      "json": "https://pwn.watch/i/adobe-coldfusion-cve-2023-26360.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Adobe ColdFusion",
      "tags": [
        "adobe",
        "coldfusion",
        "cisa-kev",
        "rce",
        "deserialization"
      ],
      "cveIds": [
        "CVE-2023-26360"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-03-15",
      "closedAt": "2023-03-15",
      "updatedAt": "2023-03-15",
      "summary": "Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote code execution. Added to CISA KEV on 2023-03-15.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "adobe-commerce-and-magento-cve-2026-71362",
      "incidentTitle": "Adobe Commerce and Magento : Adobe Commerce and Magento Incorrect Authorization Vulnerability ",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-09-24",
      "title": "CISA added CVE-2026-71362 to the KEV catalog (due 2026-09-27).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/adobe-commerce-and-magento-cve-2026-71362"
    },
    {
      "incident": "adobe-commerce-and-magento-cve-2026-75650",
      "incidentTitle": "Adobe Commerce and Magento: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-09-08",
      "title": "CISA added CVE-2026-75650 to the KEV catalog (due 2026-09-11).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/adobe-commerce-and-magento-cve-2026-75650"
    },
    {
      "incident": "adobe-coldfusion-cve-2026-48282",
      "incidentTitle": "Adobe ColdFusion: Adobe ColdFusion Path Traversal Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-07-07",
      "title": "CISA added CVE-2026-48282 to the KEV catalog (due 2026-07-10).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/adobe-coldfusion-cve-2026-48282"
    },
    {
      "incident": "adobe-acrobat-and-reader-cve-2026-34621",
      "incidentTitle": "Adobe Acrobat and Reader: Adobe Acrobat and Reader Prototype Pollution Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-04-13",
      "title": "CISA added CVE-2026-34621 to the KEV catalog (due 2026-04-27).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/adobe-acrobat-and-reader-cve-2026-34621"
    },
    {
      "incident": "adobe-commerce-and-magento-cve-2025-54236",
      "incidentTitle": "Adobe Commerce and Magento: Commerce and Magento Improper Input Validation Vulnerability",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-10-24",
      "title": "CISA added CVE-2025-54236 to the KEV catalog (due 2025-11-14).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/adobe-commerce-and-magento-cve-2025-54236"
    },
    {
      "incident": "adobe-experience-manager-aem-forms-cve-2025-54253",
      "incidentTitle": "Adobe Experience Manager (AEM) Forms: Experience Manager Forms Code Execution Vulnerability",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-10-15",
      "title": "CISA added CVE-2025-54253 to the KEV catalog (due 2025-11-05).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/adobe-experience-manager-aem-forms-cve-2025-54253"
    },
    {
      "incident": "adobe-coldfusion-cve-2017-3066",
      "incidentTitle": "Adobe ColdFusion: ColdFusion Deserialization Vulnerability",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-02-24",
      "title": "CISA added CVE-2017-3066 to the KEV catalog (due 2025-03-17).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/adobe-coldfusion-cve-2017-3066"
    },
    {
      "incident": "adobe-coldfusion-cve-2024-20767",
      "incidentTitle": "Adobe ColdFusion Improper Access Control",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-12-16",
      "title": "CISA added CVE-2024-20767 to the KEV catalog (federal deadline 2025-01-06)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/adobe-coldfusion-cve-2024-20767"
    },
    {
      "incident": "adobe-flash-player-cve-2013-0643-cve-2013-0648",
      "incidentTitle": "Adobe Flash Player: 4 actively exploited vulnerabilities",
      "severity": "high",
      "status": "closed",
      "patchStatus": "unpatched",
      "date": "2024-09-17",
      "title": "CISA added CVE-2013-0643 to the KEV catalog (federal deadline 2024-10-08)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/adobe-flash-player-cve-2013-0643-cve-2013-0648"
    },
    {
      "incident": "adobe-flash-player-cve-2013-0643-cve-2013-0648",
      "incidentTitle": "Adobe Flash Player: 4 actively exploited vulnerabilities",
      "severity": "high",
      "status": "closed",
      "patchStatus": "unpatched",
      "date": "2024-09-17",
      "title": "CISA added CVE-2013-0648 to the KEV catalog (federal deadline 2024-10-08)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/adobe-flash-player-cve-2013-0643-cve-2013-0648"
    },
    {
      "incident": "adobe-flash-player-cve-2013-0643-cve-2013-0648",
      "incidentTitle": "Adobe Flash Player: 4 actively exploited vulnerabilities",
      "severity": "high",
      "status": "closed",
      "patchStatus": "unpatched",
      "date": "2024-09-17",
      "title": "CISA added CVE-2014-0497 to the KEV catalog (federal deadline 2024-10-08)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/adobe-flash-player-cve-2013-0643-cve-2013-0648"
    },
    {
      "incident": "adobe-flash-player-cve-2013-0643-cve-2013-0648",
      "incidentTitle": "Adobe Flash Player: 4 actively exploited vulnerabilities",
      "severity": "high",
      "status": "closed",
      "patchStatus": "unpatched",
      "date": "2024-09-17",
      "title": "CISA added CVE-2014-0502 to the KEV catalog (federal deadline 2024-10-08)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/adobe-flash-player-cve-2013-0643-cve-2013-0648"
    },
    {
      "incident": "adobe-commerce-and-magento-open-source-cve-2024-34102",
      "incidentTitle": "Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-07-17",
      "title": "CISA added CVE-2024-34102 to the KEV catalog (federal deadline 2024-08-07)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102"
    },
    {
      "incident": "adobe-commerce-and-magento-open-source-cve-2024-34102",
      "incidentTitle": "Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-06-13",
      "title": "CVE-2024-34102 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-34102",
      "url": "https://pwn.watch/i/adobe-commerce-and-magento-open-source-cve-2024-34102"
    },
    {
      "incident": "adobe-coldfusion-cve-2024-20767",
      "incidentTitle": "Adobe ColdFusion Improper Access Control",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-03-18",
      "title": "CVE-2024-20767 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-20767",
      "url": "https://pwn.watch/i/adobe-coldfusion-cve-2024-20767"
    },
    {
      "incident": "adobe-coldfusion-cve-2023-29300-38203",
      "incidentTitle": "Adobe ColdFusion: 2 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-01-08",
      "title": "CISA added CVE-2023-29300 to the KEV catalog (federal deadline 2024-01-29)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/adobe-coldfusion-cve-2023-29300-38203"
    },
    {
      "incident": "adobe-coldfusion-cve-2023-29300-38203",
      "incidentTitle": "Adobe ColdFusion: 2 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-01-08",
      "title": "CISA added CVE-2023-38203 to the KEV catalog (federal deadline 2024-01-29)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/adobe-coldfusion-cve-2023-29300-38203"
    },
    {
      "incident": "adobe-acrobat-and-reader-cve-2023-21608",
      "incidentTitle": "Adobe Acrobat and Reader: Use-After-Free (CVE-2023-21608)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-10-10",
      "title": "CISA added CVE-2023-21608 to the KEV catalog (due 2023-10-31).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/adobe-acrobat-and-reader-cve-2023-21608"
    },
    {
      "incident": "adobe-acrobat-and-reader-cve-2023-26369",
      "incidentTitle": "Adobe Acrobat and Reader: Out-of-Bounds Write (CVE-2023-26369)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-09-14",
      "title": "CISA added CVE-2023-26369 to the KEV catalog (due 2023-10-05).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/adobe-acrobat-and-reader-cve-2023-26369"
    },
    {
      "incident": "adobe-coldfusion-cve-2023-26359",
      "incidentTitle": "Adobe ColdFusion: Deserialization of Untrusted Data (CVE-2023-26359)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-08-21",
      "title": "CISA added CVE-2023-26359 to the KEV catalog (due 2023-09-11).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/adobe-coldfusion-cve-2023-26359"
    },
    {
      "incident": "adobe-coldfusion-cve-2023-29298-38205",
      "incidentTitle": "Adobe ColdFusion: 2 exploited vulnerabilities (CVE-2023-29298, CVE-2023-38205)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-07-20",
      "title": "CISA added CVE-2023-29298 to the KEV catalog (due 2023-08-10).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/adobe-coldfusion-cve-2023-29298-38205"
    },
    {
      "incident": "adobe-coldfusion-cve-2023-29298-38205",
      "incidentTitle": "Adobe ColdFusion: 2 exploited vulnerabilities (CVE-2023-29298, CVE-2023-38205)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-07-20",
      "title": "CISA added CVE-2023-38205 to the KEV catalog (due 2023-08-10).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/adobe-coldfusion-cve-2023-29298-38205"
    },
    {
      "incident": "adobe-coldfusion-cve-2023-26360",
      "incidentTitle": "Adobe ColdFusion: Deserialization of Untrusted Data (CVE-2023-26360)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-03-15",
      "title": "CISA added CVE-2023-26360 to the KEV catalog (due 2023-04-05).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/adobe-coldfusion-cve-2023-26360"
    }
  ]
}