Dreamweaver (Adobe) - vulnerabilities (CVEs)

22 CVEs, 0 in the last 30 days, 31 known versions, newest CVE from 2026-06-09. Vendor: Adobe.

CVEs of Dreamweaver

• CVE-2026-47910 - CVSS 6.3 (medium), 2026-06-09: Dreamweaver Desktop versions 21.7 and earlier are affected by an Incorrect Authorization vulnerability that could lead to arbitrary file system read. An…
• CVE-2026-47909 - CVSS 6.3 (medium), 2026-06-09: Dreamweaver Desktop versions 21.7 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An…
• CVE-2026-47908 - CVSS 7.8 (high), 2026-06-09: Dreamweaver Desktop versions 21.7 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution…
• CVE-2026-47907 - CVSS 8.6 (high), 2026-06-09: Dreamweaver Desktop versions 21.7 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the…
• CVE-2026-47906 - CVSS 8.6 (high), 2026-06-09: Dreamweaver Desktop versions 21.7 and earlier are affected by a Dependency on Vulnerable Third-Party Component vulnerability that could result in arbitrary…
• CVE-2026-21267 - CVSS 8.6 (high), 2026-01-13: Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…
• CVE-2026-21272 - CVSS 8.6 (high), 2026-01-13: Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An…
• CVE-2026-21271 - CVSS 8.6 (high), 2026-01-13: Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the…
• CVE-2026-21268 - CVSS 8.6 (high), 2026-01-13: Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the…
• CVE-2026-21274 - CVSS 7.8 (high), 2026-01-13: Dreamweaver Desktop versions 21.6 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the…
• CVE-2025-54256 - CVSS 8.6 (high), 2025-09-09: Dreamweaver Desktop versions 21.5 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in arbitrary code execution…
• CVE-2025-30310 - CVSS 7.8 (high), 2025-05-13: Dreamweaver Desktop versions 21.4 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result…
• CVE-2024-30314 - CVSS 7.8 (high), 2024-05-16: Dreamweaver Desktop versions 21.3 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…
• CVE-2021-21055 - CVSS 6.2 (medium), 2021-02-11: Adobe Dreamweaver versions 21.0 (and earlier) and 20.2 (and earlier) is affected by an untrusted search path vulnerability that could result in information…
• CVE-2020-24425 - CVSS 7.8 (high), 2020-10-21: Dreamweaver version 20.2 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. Successful…
• CVE-2019-7956 - CVSS 7.8 (high), 2019-07-18: Adobe Dreamweaver direct download installer versions 19.0 and below, 18.0 and below have an Insecure Library Loading (DLL hijacking) vulnerability. Successful…
• CVE-2019-7097 - CVSS 7.5 (high), 2019-05-23: Adobe Dreamweaver versions 19.0 and earlier have an insecure protocol implementation vulnerability. Successful exploitation could lead to sensitive data…
• CVE-2018-4924 - CVSS 9.8 (critical), 2018-05-19: Adobe Dreamweaver CC versions 18.0 and earlier have an OS Command Injection vulnerability. Successful exploitation could lead to arbitrary code execution in…
• CVE-2010-3132 - CVSS 9.3 (critical), 2010-08-26: Untrusted search path vulnerability in Adobe Dreamweaver CS5 11.0 build 4916, build 4909, and probably other versions, allows local users, and possibly remote…
• CVE-2008-6062 - CVSS 4.3 (medium), 2009-02-05: Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by Adobe Dreamweaver, when the Insert Flash Video…
• CVE-2006-2042 - CVSS 7.5 (high), 2006-05-09: Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the (1) ColdFusion, (2) PHP mySQL, (3) ASP, (4) ASP.NET,…
• CVE-2005-4708 - CVSS 7.2 (high), 2005-12-31: Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group…