CVE-2025-61824

Adobe InDesign Desktop is affected by a Heap-based Buffer Overflow vulnerability (CWE-122) in versions 20.5, 19.5.5 and earlier that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Connected sourc...

CVE-2025-61824 InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-61832 InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-61832

CVE-2025-61832 corresponds to a heap-based buffer overflow in Adobe InDesign Desktop (versions 20.5, 19.5.5 and earlier) that can lead to arbitrary code execution in the current user context. Exploitation requires user interaction (opening a malicious file). The connected documents confirm the vu...

CVE-2025-61832 InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2025-46441

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 20.5, 19.5.5 and earlier Description InDesign Desktop versions 20.5, 19.5.5 and earlier are susceptible to a Use After Free issue. Successful exploitation of this issue could lead to arbitrary code execution with the...

PT-2025-46447

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 20.5, 19.5.5 and earlier Description InDesign Desktop versions 20.5, 19.5.5 and earlier are susceptible to a Heap-based Buffer Overflow. Successful exploitation of this issue could lead to arbitrary code execution wit...

PT-2025-46489

Name of the Vulnerable Software and Affected Versions Illustrator on iPad versions 3.0.9 and earlier Description Illustrator on iPad versions 3.0.9 and earlier are susceptible to an Integer Underflow vulnerability. Successful exploitation of this issue could lead to arbitrary code execution withi...

PT-2025-46493

Name of the Vulnerable Software and Affected Versions Illustrator on iPad versions 3.0.9 and earlier Description Illustrator on iPad versions 3.0.9 and earlier are susceptible to an Integer Underflow vulnerability. Successful exploitation of this issue could lead to arbitrary code execution withi...

PT-2025-46527

Name of the Vulnerable Software and Affected Versions Format Plugins versions 1.1.1 and earlier Description Format Plugins versions 1.1.1 and earlier are susceptible to an Out-of-bounds Read issue, potentially leading to memory exposure. An attacker could exploit this to disclose sensitive...

PT-2025-46522

Name of the Vulnerable Software and Affected Versions Format Plugins versions 1.1.1 and earlier Description Format Plugins versions 1.1.1 and earlier are susceptible to an Out-of-bounds Read issue, potentially leading to memory exposure. An attacker could exploit this to disclose sensitive...

SAP NetWeaver Application Server for ABAP 代码问题漏洞

SAP NetWeaver Application Server for ABAP is a core application server platform from SAP, Germany. A code issue vulnerability exists in SAP NetWeaver Application Server for ABAP that stems from an administrator uploading a file without triggering a malware scan, which could result in the upload o...

WordPress Case Addons plugin file upload vulnerability

The WordPress Case Addons plugin is a plugin for the Elementor page builder that offers a wide range of functional components and templates for enhancing website design and content presentation. The WordPress Case Addons plugin suffers from a file upload vulnerability that stems from the...

PT-2025-46449

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 20.5, 19.5.5 and earlier Description InDesign Desktop versions 20.5, 19.5.5 and earlier are susceptible to a Heap-based Buffer Overflow. Successful exploitation of this issue could lead to arbitrary code execution wit...

PT-2025-46492

Name of the Vulnerable Software and Affected Versions Illustrator on iPad versions 3.0.9 and earlier Description Illustrator on iPad versions 3.0.9 and earlier are susceptible to a Heap-based Buffer Overflow. Successful exploitation of this issue could lead to arbitrary code execution with the...

PT-2025-46547

Name of the Vulnerable Software and Affected Versions Substance3D - Stager versions 3.1.5 and earlier Description An Integer Underflow Wrap or Wraparound issue exists in Substance3D - Stager. Successful exploitation could lead to arbitrary code execution with the privileges of the current user...

PT-2025-46446

Name of the Vulnerable Software and Affected Versions Illustrator versions 28.7.10 through 29.8.2 Description Illustrator versions 28.7.10 and 29.8.2, and earlier, are susceptible to a Heap-based Buffer Overflow. Successful exploitation of this issue could lead to arbitrary code execution with th...

PT-2025-46490

Name of the Vulnerable Software and Affected Versions Illustrator on iPad versions 3.0.9 and earlier Description Illustrator on iPad versions 3.0.9 and earlier are susceptible to a Heap-based Buffer Overflow. Successful exploitation of this issue could lead to arbitrary code execution within the...

PT-2025-46491

Name of the Vulnerable Software and Affected Versions Illustrator on iPad versions 3.0.9 and earlier Description Illustrator on iPad versions 3.0.9 and earlier have an out-of-bounds write issue. Successful exploitation could lead to arbitrary code execution with the privileges of the current user...

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...