CVE-2025-30327

CVE-2025-30327 affects Adobe InCopy versions 20.2, 19.5.3 and earlier, due to an Integer Overflow or Wraparound (CWE-190) that could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). The issue is addressed b...

CVE-2025-47107

Adobe InCopy is affected by CVE-2025-47107 (Heap-based Buffer Overflow) in InCopy 20.2, 19.5.3 and earlier, enabling arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. Mitigation: apply APSB25-41 security update; patched versions ...

CVE-2025-30327 InCopy | Integer Overflow or Wraparound (CWE-190)

InCopy versions 20.2, 19.5.3 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-30327 InCopy | Integer Overflow or Wraparound (CWE-190)

InCopy versions 20.2, 19.5.3 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-47107 InCopy | Heap-based Buffer Overflow (CWE-122)

InCopy versions 20.2, 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-47107 InCopy | Heap-based Buffer Overflow (CWE-122)

InCopy versions 20.2, 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe InCopy Integer Overflow Vulnerability

Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from an integer underflow vulnerability that can be exploited by an attacker to execute arbitrary code...

CVE-2025-21156

InCopy versions 20.0, 19.5.1 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-21156

InCopy versions 20.0, 19.5.1 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-21156

InCopy versions 20.0, 19.5.1 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-21156 InCopy | Integer Underflow (Wrap or Wraparound) (CWE-191)

InCopy versions 20.0, 19.5.1 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-21156 InCopy | Integer Underflow (Wrap or Wraparound) (CWE-191)

InCopy versions 20.0, 19.5.1 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-21156

Adobe InCopy is affected by an Integer Underflow (Wrap or Wraparound) vulnerability (CVE-2025-21156) in versions 20.0, 19.5.1 and earlier, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. Public so...

PT-2025-6280 · Adobe · Incopy

Name of the Vulnerable Software and Affected Versions: InCopy versions 20.0, 19.5.1 and earlier Description: The issue is an Integer Underflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction, wher...

Vulnerability fixed in Adobe InCopy

Adobe has fixed a vulnerability in InCopy. A malicious person could exploit the vulnerability to execute arbitrary code with privileges of the victim. For successful abuse, the malicious party must trick the victim into opening a rogue file. Adobe has released updates to fix the vulnerability in...

CVE-2022-28834

Adobe InCopy versions 17.1 and earlier and 16.4.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2022-28835

Adobe InCopy versions 17.1 and earlier and 16.4.1 and earlier are affected by an Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2022-28836

Adobe InCopy versions 17.1 and earlier and 16.4.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-21598

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that...

CVE-2023-21598 Adobe InCopy Font Parsing Use-After-Free Information Disclosure Vulnerability

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that...