ZDI-CAN-25684: ZDI-25-308: Adobe Dreamweaver V8 Remote Code Execution Vulnerability

Published May 21, 2025

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dreamweaver. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-30310.

Affected Software

1 affected component

Adobe Dreamweaver

Event History

May 21, 2025

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-25684?

ZDI-CAN-25684 has been assigned a critical severity rating due to its potential to allow arbitrary code execution.

How do I fix ZDI-CAN-25684?

To fix ZDI-CAN-25684, ensure that you apply the latest security updates released by Adobe for Dreamweaver.

Who is affected by ZDI-CAN-25684?

ZDI-CAN-25684 affects installations of Adobe Dreamweaver, particularly the 2021 version.

What type of attacks are associated with ZDI-CAN-25684?

ZDI-CAN-25684 allows remote attackers to execute arbitrary code, requiring user interaction to exploit it.

What are the prerequisites for exploiting ZDI-CAN-25684?

Exploitation of ZDI-CAN-25684 requires the target user to visit a malicious page or open a malicious file.