Adobe
Adobe Dreamweaver: vulnerabilidades y CVE
Adobe Dreamweaver tiene 23 vulnerabilidades publicadas, 11 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE23
Últimos 12 meses11
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-19229 | Media (5.5) | 0.56% | — | 7 ago 2026 | A vulnerability was determined in SourceCodester Online Clothing Store. Affected by this issue is some unknown functionality of the file /_notes/ of the component Dreamweaver Metadata Files. Executing a manipulation can… |
| CVE-2026-47910 | Media (6.3) | 0.24% | — | 9 jun 2026 | Dreamweaver Desktop versions 21.7 and earlier are affected by an Incorrect Authorization vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive… |
| CVE-2026-47909 | Media (6.3) | 0.26% | — | 9 jun 2026 | Dreamweaver Desktop versions 21.7 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive… |
| CVE-2026-47908 | Alta (7.8) | 0.29% | — | 9 jun 2026 | Dreamweaver Desktop versions 21.7 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue… |
| CVE-2026-47907 | Alta (8.6) | 0.28% | — | 9 jun 2026 | Dreamweaver Desktop versions 21.7 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this… |
| CVE-2026-47906 | Alta (8.6) | 0.29% | — | 9 jun 2026 | Dreamweaver Desktop versions 21.7 and earlier are affected by a Dependency on Vulnerable Third-Party Component vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation… |
| CVE-2026-21274 | Alta (7.8) | 0.24% | — | 13 ene 2026 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could leverage this… |
| CVE-2026-21272 | Alta (8.6) | 0.23% | — | 13 ene 2026 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An attacker could leverage this vulnerability to manipulate or… |
| CVE-2026-21271 | Alta (8.6) | 0.25% | — | 13 ene 2026 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue… |
| CVE-2026-21268 | Alta (8.6) | 0.25% | — | 13 ene 2026 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue… |
| CVE-2026-21267 | Alta (8.6) | 0.83% | — | 13 ene 2026 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an… |
| CVE-2025-54256 | Alta (8.6) | 0.18% | — | 9 sept 2025 | Dreamweaver Desktop versions 21.5 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this… |
| CVE-2025-30310 | Alta (7.8) | 0.32% | — | 13 may 2025 | Dreamweaver Desktop versions 21.4 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current… |
| CVE-2024-30314 | Alta (7.8) | 0.86% | — | 16 may 2024 | Dreamweaver Desktop versions 21.3 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an… |
| CVE-2021-21055 | Media (6.2) | 0.78% | — | 11 feb 2021 | Adobe Dreamweaver versions 21.0 (and earlier) and 20.2 (and earlier) is affected by an untrusted search path vulnerability that could result in information disclosure. An attacker with physical access to the system… |
| CVE-2020-24425 | Alta (7.8) | 0.68% | — | 21 oct 2020 | Dreamweaver version 20.2 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. Successful exploitation could result in a local user with permissions to… |
| CVE-2019-7956 | Alta (7.8) | 3.3% | — | 18 jul 2019 | Adobe Dreamweaver direct download installer versions 19.0 and below, 18.0 and below have an Insecure Library Loading (DLL hijacking) vulnerability. Successful exploitation could lead to Privilege Escalation in the… |
| CVE-2019-7097 | Alta (7.5) | 3.6% | — | 23 may 2019 | Adobe Dreamweaver versions 19.0 and earlier have an insecure protocol implementation vulnerability. Successful exploitation could lead to sensitive data disclosure if smb request is subject to a relay attack. |
| CVE-2018-4924 | Crítica (9.8) | 14% | — | 19 may 2018 | Adobe Dreamweaver CC versions 18.0 and earlier have an OS Command Injection vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user. |
| CVE-2010-3132 | Alta (9.3) | 14% | — | 26 ago 2010 | Untrusted search path vulnerability in Adobe Dreamweaver CS5 11.0 build 4916, build 4909, and probably other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL… |
| CVE-2008-6062 | Media (4.3) | 1.7% | — | 5 feb 2009 | Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by Adobe Dreamweaver, when the Insert Flash Video feature is used, allows remote attackers to inject arbitrary… |
| CVE-2006-2042 | Alta (7.5) | 5.4% | — | 9 may 2006 | Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the (1) ColdFusion, (2) PHP mySQL, (3) ASP, (4) ASP.NET, and (5) JSP server models. |
| CVE-2005-4708 | Alta (7.2) | 1.2% | — | 31 dic 2005 | Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group permitted to configure the service, including the path to… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.