PT-2026-48225

Name of the Vulnerable Software and Affected Versions Dreamweaver Desktop versions 21.7 and earlier Description An Access of Uninitialized Pointer issue exists, which could lead to arbitrary code execution within the context of the current user. This occurs when a user opens a malicious file,...

CVE-2026-34707: Heap-based Buffer Overflow

InCopy versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48305: Out-of-bounds Write

Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-34696: Use After Free

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe InDesign Desktop 资源管理错误漏洞

Adobe InDesign Desktop is a page layout software developed by Adobe, a company based in America. Versions of Adobe InDesign Desktop such as 21.3, 20.5.3, and earlier versions have a resource management vulnerability. This vulnerability stems from a release-after-reuse flaw, which could allow...

CVE-2026-34700: Out-of-bounds Write

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-34695: Stack-based Buffer Overflow

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-48140

Name of the Vulnerable Software and Affected Versions Adobe InDesign Desktop versions prior to 21.3 Adobe InDesign Desktop versions prior to 20.5.3 Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hol...

PT-2026-48138

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 21.3 and earlier InDesign Desktop versions 20.5.3 and earlier Description An out-of-bounds write issue exists where data is written outside the intended buffer boundaries, which could allow arbitrary code execution in...

PT-2026-48139

Name of the Vulnerable Software and Affected Versions Adobe InDesign Desktop versions prior to 21.3 Adobe InDesign Desktop versions prior to 20.5.3 Description A heap-based buffer overflow exists, which is a memory corruption issue where a program writes more data to a heap-allocated memory block...

PT-2026-48141

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions prior to 21.3 InDesign Desktop versions prior to 20.5.3 Description A NULL Pointer Dereference issue exists where the application attempts to read a memory address that is null, leading to a crash. This can result in ...

PT-2026-48251

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions 24.001.30365 through 26.001.21651 Description A Use After Free issue exists in the AcroForm component, which could lead to arbitrary code execution in the context of the current user. This occurs when a victim opens a...

PT-2026-48223

Name of the Vulnerable Software and Affected Versions Dreamweaver Desktop versions 21.7 and earlier Description A dependency on a vulnerable third-party component allows for arbitrary code execution in the context of the current user. This issue requires user interaction, specifically the opening...

PT-2026-48221

Name of the Vulnerable Software and Affected Versions Substance3D Sampler versions 6.0.0 and earlier Description An out-of-bounds write occurs when the software processes a malicious file. This issue can lead to arbitrary code execution within the context of the current user and requires user...

Adobe InDesign Desktop 缓冲区错误漏洞

Adobe InDesign Desktop is a professional desktop publishing and typesetting design software, primarily used for creating print and digital publications. There is a security vulnerability in Adobe InDesign Desktop, which stems from improper handling of data writing boundaries. Attackers can exploi...

PT-2026-48277

Name of the Vulnerable Software and Affected Versions Format Plugins versions 1.1.2 and earlier Description A heap-based buffer overflow allows for arbitrary code execution in the context of the current user. This occurs when a victim opens a malicious file, requiring user interaction for...

PT-2026-48226

Name of the Vulnerable Software and Affected Versions Dreamweaver Desktop versions 21.7 and earlier Description Improper Input Validation allows for arbitrary file system read, enabling an attacker to access sensitive files and directories outside the intended access scope. Exploitation requires...

Adobe InDesign < 20.5.4 / 21.0 < 21.4.0 Multiple Vulnerabilities (APSB26-58)

The version of Adobe InDesign installed on the remote Windows host is prior to 20.5.4, 21.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-58 advisory. - InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability...

The vulnerability of the Chromoting component in Google Chrome and Microsoft Edge browsers allows attackers to increase their privileges.

The vulnerability of the Chromoting component in Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through the use of a malicious file...

SUSE CVE-2026-10942

Inappropriate implementation in UI in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform privilege escalation via a malicious file. Chromium security severity: High...