FEDRAMP CATALOG › Adobe Acrobat Sign for Government
Adobe Acrobat Sign for Government
Adobe · package FR2108360349
Current status
Authorized · Moderate impact · since 2026-07-07
Service modelSaaS
MarketplaceRev5 · source: marketplace
Security posture
15 critical
76 high
80 on KEV
· 91 correlated CVEs
CMMC DOMAINS ADDRESSED
STATUS TIMELINE · SCD2
| STATUS | FROM | TO |
|---|---|---|
| Authorized | 2026-07-07 | current |
AUTHORIZATIONS
| AGENCY | TYPE | DATE |
|---|---|---|
| Department of Energy | Agency | 2022-03-09 |
EXPOSED CVEs · CORRELATED TO THIS PRODUCT
all exposures
| SEVERITY | CVE | TITLE |
|---|---|---|
| HIGH | CVE-2026-47984 | CVE-2026-47984: Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul |
| HIGH | CVE-2026-47988 | CVE-2026-47988: Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul |
| HIGH | CVE-2026-48320 | CVE-2026-48320: ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. |
| HIGH | CVE-2026-48282 | Adobe ColdFusion Path Traversal Vulnerability |
| CRITICAL | CVE-2026-34691 | CVE-2026-34691: Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are af |
| CRITICAL | CVE-2026-47928 | CVE-2026-47928: ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Inpu |
| HIGH | CVE-2026-47929 | CVE-2026-47929: ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Aut |
| HIGH | CVE-2026-47931 | CVE-2026-47931: ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Inpu |
| HIGH | CVE-2026-47932 | CVE-2026-47932: ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limi |
| HIGH | CVE-2009-3459 | Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability |
| CRITICAL | CVE-2026-34615 | CVE-2026-34615: Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserializati |
| HIGH | CVE-2020-9715 | Adobe Acrobat Use-After-Free Vulnerability |
| HIGH | CVE-2026-34621 | Adobe Acrobat and Reader Prototype Pollution Vulnerability |
| HIGH | CVE-2025-54236 | Adobe Commerce and Magento Improper Input Validation Vulnerability |
| HIGH | CVE-2025-54253 | Adobe Experience Manager Forms Code Execution Vulnerability |
| HIGH | CVE-2017-3066 | Adobe ColdFusion Deserialization Vulnerability |
| HIGH | CVE-2024-20767 | Adobe ColdFusion Improper Access Control Vulnerability |
| HIGH | CVE-2013-0643 | Adobe Flash Player Incorrect Default Permissions Vulnerability |
| HIGH | CVE-2013-0648 | Adobe Flash Player Code Execution Vulnerability |
| HIGH | CVE-2014-0497 | Adobe Flash Player Integer Underflow Vulnerablity |
| HIGH | CVE-2014-0502 | Adobe Flash Player Double Free Vulnerablity |
| HIGH | CVE-2024-34102 | Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability |
| CRITICAL | CVE-2023-29300 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability |
| CRITICAL | CVE-2023-38203 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability |
| HIGH | CVE-2023-21608 | Adobe Acrobat and Reader Use-After-Free Vulnerability |
| HIGH | CVE-2023-26369 | Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability |
| HIGH | CVE-2023-26359 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability |
| HIGH | CVE-2023-29298 | Adobe ColdFusion Improper Access Control Vulnerability |
| HIGH | CVE-2023-38205 | Adobe ColdFusion Improper Access Control Vulnerability |
| HIGH | CVE-2023-26360 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability |
| HIGH | CVE-2007-5659 | Adobe Acrobat and Reader Buffer Overflow Vulnerability |
| HIGH | CVE-2008-0655 | Adobe Acrobat and Reader Unspecified Vulnerability |
| HIGH | CVE-2009-1862 | Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability |
| HIGH | CVE-2009-3953 | Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability |
| HIGH | CVE-2009-4324 | Adobe Acrobat and Reader Use-After-Free Vulnerability |
| HIGH | CVE-2010-1297 | Adobe Flash Player Memory Corruption Vulnerability |
| HIGH | CVE-2010-2883 | Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability |
| HIGH | CVE-2011-0609 | Adobe Flash Player Unspecified Vulnerability |
| HIGH | CVE-2011-2462 | Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability |
| HIGH | CVE-2012-0754 | Adobe Flash Player Memory Corruption Vulnerability |
| HIGH | CVE-2012-0767 | Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability |
| HIGH | CVE-2012-5054 | Adobe Flash Player Integer Overflow Vulnerability |
| HIGH | CVE-2018-4990 | Adobe Acrobat and Reader Double Free Vulnerability |
| HIGH | CVE-2014-0546 | Adobe Reader and Acrobat Sandbox Bypass Vulnerability |
| HIGH | CVE-2014-8439 | Adobe Flash Player Dereferenced Pointer Vulnerability |
| HIGH | CVE-2015-0310 | Adobe Flash Player ASLR Bypass Vulnerability |
| HIGH | CVE-2015-8651 | Adobe Flash Player Integer Overflow Vulnerability |
| HIGH | CVE-2016-0984 | Adobe Flash Player and AIR Use-After-Free Vulnerability |
| HIGH | CVE-2016-1010 | Adobe Flash Player and AIR Integer Overflow Vulnerability |
| HIGH | CVE-2018-5002 | Adobe Flash Player Stack-based Buffer Overflow Vulnerability |
| HIGH | CVE-2014-9163 | Adobe Flash Player Stack-Based Buffer Overflow Vulnerability |
| HIGH | CVE-2015-0311 | Adobe Flash Player Remote Code Execution Vulnerability |
| HIGH | CVE-2015-0313 | Adobe Flash Player Use-After-Free Vulnerability |
| HIGH | CVE-2015-3113 | Adobe Flash Player Heap-Based Buffer Overflow Vulnerability |
| HIGH | CVE-2015-5122 | Adobe Flash Player Use-After-Free Vulnerability |
| HIGH | CVE-2015-5123 | Adobe Flash Player Use-After-Free Vulnerability |
| HIGH | CVE-2012-2034 | Adobe Flash Player Memory Corruption Vulnerability |
| HIGH | CVE-2013-2729 | Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability |
| HIGH | CVE-2009-0927 | Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability |
| CRITICAL | CVE-2010-2861 | Adobe ColdFusion Directory Traversal Vulnerability |
| HIGH | CVE-2016-4171 | Adobe Flash Player Remote Code Execution Vulnerability |
| HIGH | CVE-2016-7892 | Adobe Flash Player Use-After-Free Vulnerability |
| CRITICAL | CVE-2009-3960 | Adobe BlazeDS Information Disclosure Vulnerability |
| HIGH | CVE-2013-0625 | Adobe ColdFusion Authentication Bypass Vulnerability |
| HIGH | CVE-2013-0629 | Adobe ColdFusion Directory Traversal Vulnerability |
| HIGH | CVE-2013-0631 | Adobe ColdFusion Information Disclosure Vulnerability |
| CRITICAL | CVE-2008-2992 | Adobe Reader and Acrobat Input Validation Vulnerability |
| CRITICAL | CVE-2010-0188 | Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability |
| HIGH | CVE-2011-0611 | Adobe Flash Player Remote Code Execution Vulnerability |
| HIGH | CVE-2012-1535 | Adobe Flash Player Arbitrary Code Execution Vulnerability |
| HIGH | CVE-2013-0632 | Adobe ColdFusion Authentication Bypass Vulnerability |
| HIGH | CVE-2013-0640 | Adobe Reader and Acrobat Memory Corruption Vulnerability |
| HIGH | CVE-2013-0641 | Adobe Reader Buffer Overflow Vulnerability |
| HIGH | CVE-2013-3346 | Adobe Reader and Acrobat Memory Corruption Vulnerability |
| HIGH | CVE-2014-0496 | Adobe Reader and Acrobat Use-After-Free Vulnerability |
| HIGH | CVE-2015-3043 | Adobe Flash Player Memory Corruption Vulnerability |
| HIGH | CVE-2015-5119 | Adobe Flash Player Use-After-Free Vulnerability |
| CRITICAL | CVE-2015-7645 | Adobe Flash Player Arbitrary Code Execution Vulnerability |
| CRITICAL | CVE-2016-1019 | Adobe Flash Player Arbitrary Code Execution Vulnerability |
| HIGH | CVE-2016-4117 | Adobe Flash Player Arbitrary Code Execution Vulnerability |
| HIGH | CVE-2016-7855 | Adobe Flash Player Use-After-Free Vulnerability |
| HIGH | CVE-2017-11292 | Adobe Flash Player Type Confusion Vulnerability |
| CRITICAL | CVE-2018-15982 | Adobe Flash Player Use-After-Free Vulnerability |
| HIGH | CVE-2022-24086 | Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability |
| HIGH | CVE-2018-15961 | Adobe ColdFusion Unrestricted File Upload Vulnerability |
| CRITICAL | CVE-2018-4878 | Adobe Flash Player Use-After-Free Vulnerability |
| HIGH | CVE-2018-4939 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability |
| HIGH | CVE-2021-21017 | Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability |
| HIGH | CVE-2021-28550 | Adobe Acrobat and Reader Use-After-Free Vulnerability |
| CRITICAL | CVE-2016-1019 | CVE-2016-1019: Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a den |
| CRITICAL | CVE-2010-2861 | CVE-2010-2861: Multiple directory traversal vulnerabilities in the administrator console in Ado |