CVE-2025-21123 InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-21125

CVE-2025-21125 affects Adobe InDesign Desktop (ID20.0, ID19.5.1 and earlier). Root cause: NULL pointer dereference leading to application denial-of-service. Exploitation requires user interaction (victim opens a malicious file). Affected products/versions are stated in the CVE entry and corrobora...

CVE-2025-21157

CVE-2025-21157 concerns Adobe InDesign Desktop. Affected: InDesign ID20.0, ID19.5.1 and earlier. Vulnerability: out-of-bounds write in a component used by these builds, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a mal...

CVE-2025-21157 InDesign Desktop | Out-of-bounds Write (CWE-787)

InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-21157 InDesign Desktop | Out-of-bounds Write (CWE-787)

InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-21121

Adobe InDesign Desktop (IDs 20.0, 19.5.1 and earlier) is affected by an out-of-bounds write vulnerability (CVE-2025-21121) that could enable arbitrary code execution in the current user context. Exploitation requires user interaction: a victim must open a malicious file. The issue is classified w...

CVE-2025-21121 InDesign Desktop | Out-of-bounds Write (CWE-787)

InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-21121 InDesign Desktop | Out-of-bounds Write (CWE-787)

InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-21124 InDesign Desktop | Out-of-bounds Read (CWE-125)

InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2025-21124

Adobe InDesign CVE-2025-21124 affects InDesign Desktop versions ID20.0, ID19.5.1 and earlier with an out-of-bounds read vulnerability that could disclose sensitive memory and bypass mitigations such as ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected product/...

CVE-2025-21124 InDesign Desktop | Out-of-bounds Read (CWE-125)

InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

PT-2025-6273

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID20.0, ID19.5.1 and earlier Description: The issue is a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the...

PT-2025-6274

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID20.0, ID19.5.1 and earlier Description: The issue is related to an improper input validation vulnerability that could result in an application denial-of-service condition. An attacker could exploit this vulnerabili...

PT-2025-6271

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID20.0, ID19.5.1 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2025-6276

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID20.0, ID19.5.1 and earlier Description: The issue is related to an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o...

PT-2025-6270

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions ID20.0, ID19.5.1 and earlier Description InDesign Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu...

PT-2025-6275

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions ID20.0, ID19.5.1 and earlier Description The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

CVE-2025-21123: Heap-based Buffer Overflow

InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-21121: Out-of-bounds Write

InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-21126: Improper Input Validation

InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service condition. An attacker could exploit this vulnerability to cause the application to crash, resulting in a denial of service...