CVE-2025-43549

Adobe Substance 3D Stager is affected (versions 3.1.1 and earlier) by a Use-After-Free vulnerability that could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). The issue is confirmed across multiple so...

CVE-2025-43572

Adobe Dimension ( Dimension 4.1.2 and earlier ) is affected by an out-of-bounds write vulnerability that could enable arbitrary code execution in the current user context. Exploitation requires the victim to open a malicious file. Root cause: memory boundary management failure. Impact is high per...

CVE-2025-43548 Dimension | Out-of-bounds Write (CWE-787)

Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-43547

Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-43555

Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-43545

Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-30329

Animate versions 24.0.8, 23.0.11 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption of service. Exploitation of this issue requires user...

CVE-2025-30328

Animate versions 24.0.8, 23.0.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-43547

CVE-2025-43547 is a vulnerability in Adobe Bridge where Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Integer Overflow or Wraparound that could enable arbitrary code execution in the context of the current user. Exploitation requires the victim to open a malicious file (user inter...

CVE-2025-43557 Animate | Access of Uninitialized Pointer (CWE-824)

Animate versions 24.0.8, 23.0.11 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-43557 Animate | Access of Uninitialized Pointer (CWE-824)

Animate versions 24.0.8, 23.0.11 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-43556

CVE-2025-43556 concerns Adobe Animate versions 24.0.8, 23.0.11 and earlier. The issue is an Integer Overflow or Wraparound that can lead to arbitrary code execution in the user’s context; exploitation requires the user to open a malicious file. Connected sources corroborate affected versions and ...

CVE-2025-30328 Animate | Out-of-bounds Write (CWE-787)

Animate versions 24.0.8, 23.0.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-30325 Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)

Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-30325

CVE-2025-30325 affects Adobe Photoshop Desktop versions 26.5, 25.12.2 and earlier. The root cause is an Integer Overflow/Wraparound in processing certain files, enabling arbitrary code execution in the user’s context. Exploitation requires the user to open a malicious file. Impact per CVSS indica...

CVE-2025-30324 Photoshop Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)

Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2025-30310

Dreamweaver Desktop versions 21.4 and earlier are affected by an Access of Resource Using Incompatible Type 'Type Confusion' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must...

CVE-2025-30318

InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-30319

InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing a disruption in service. Exploitation of this issue...

CVE-2025-27197

CVE-2025-27197 affects Adobe Lightroom Desktop: versions 8.2 and earlier are vulnerable to an out-of-bounds write that can allow arbitrary code execution under the current user. Exploitation requires user interaction—victim must open a malicious file. Affected product/component: Lightroom Desktop...