CVE-2025-24452: Out-of-bounds Write

InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-27171: Heap-based Buffer Overflow

InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-27176: NULL Pointer Dereference

InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of...

CVE-2025-27179: NULL Pointer Dereference

InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of...

CVE-2025-27177: Heap-based Buffer Overflow

InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-27166: Out-of-bounds Write

InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe InDesign < 19.5.3 / 20.0 < 20.2.0 Multiple Vulnerabilities (APSB25-19) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 19.5.3, 20.2.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-19 advisory. - Out-of-bounds Write CWE-787 potentially leading to Memory Leak CVE-2025-24452, CVE-2025-27178 - Heap-based...

PT-2025-10887

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID20.1, ID19.5.2 and earlier Description: The issue is a NULL Pointer Dereference that could result in an application denial-of-service. An attacker could exploit this to crash the application, leading to a...

PT-2025-10888

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID20.1, ID19.5.2 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, where a...

PT-2025-10884

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID20.1, ID19.5.2 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, where a...

PT-2025-10889

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID20.1, ID19.5.2 and earlier Description: The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2025-10870

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID20.1, ID19.5.2 and earlier Description: The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

Adobe InDesign < 19.5.3 / 20.0 < 20.2.0 Multiple Vulnerabilities (APSB25-19)

The version of Adobe InDesign installed on the remote Windows host is prior to 19.5.3, 20.2.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-19 advisory. - Out-of-bounds Write CWE-787 potentially leading to Memory Leak CVE-2025-24452, CVE-2025-27178 - Heap-bas...

APSB25-19 : Security update available for Adobe InDesign

Adobe has released a security update for Adobe InDesign. This update addresses critical and important vulnerabilities. Successful exploitation could lead to memory leak, arbitrary code execution and application denial-of-service...

PT-2025-10871 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID20.1, ID19.5.2 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, where a...

Adobe InDesign Out-of-Bounds Read Vulnerability (CNVD-2025-03640)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

Adobe InDesign Out-of-Bounds Write Vulnerability (CNVD-2025-03633)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the current user's environment...

Adobe InDesign Out-of-Bounds Write Vulnerability (CNVD-2025-03639)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the current user's environment...

Adobe InDesign Code Execution Vulnerability (CNVD-2025-03642)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. A code execution vulnerability exists in Adobe InDesign that can be exploited by an attacker to execute arbitrary code in the current user's environment...

Adobe InDesign Improper Input Validation Vulnerability

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an improper input validation vulnerability that can be exploited by an attacker to cause a denial of service in the application...