CVE-2025-43556

CVE-2025-43556 concerns Adobe Animate versions 24.0.8, 23.0.11 and earlier. The issue is an Integer Overflow or Wraparound that can lead to arbitrary code execution in the user’s context; exploitation requires the user to open a malicious file. Connected sources corroborate affected versions and ...

CVE-2025-30328 Animate | Out-of-bounds Write (CWE-787)

Animate versions 24.0.8, 23.0.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-30325

CVE-2025-30325 affects Adobe Photoshop Desktop versions 26.5, 25.12.2 and earlier. The root cause is an Integer Overflow/Wraparound in processing certain files, enabling arbitrary code execution in the user’s context. Exploitation requires the user to open a malicious file. Impact per CVSS indica...

CVE-2025-30325 Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)

Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-30324 Photoshop Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)

Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2025-30310

Dreamweaver Desktop versions 21.4 and earlier are affected by an Access of Resource Using Incompatible Type 'Type Confusion' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must...

CVE-2025-30318

InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-30319

InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing a disruption in service. Exploitation of this issue...

CVE-2025-27197

CVE-2025-27197 affects Adobe Lightroom Desktop: versions 8.2 and earlier are vulnerable to an out-of-bounds write that can allow arbitrary code execution under the current user. Exploitation requires user interaction—victim must open a malicious file. Affected product/component: Lightroom Desktop...

CVE-2025-30320 InDesign Desktop | NULL Pointer Dereference (CWE-476)

InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption in service. Exploitation of this issue requir...

CVE-2025-30318

Adobe InDesign Desktop (IDs ID19.5.2, ID20.2 and older) is affected by an out-of-bounds write vulnerability (CWE-787) in a core component that could allow arbitrary code execution in the user’s context. Exploitation requires user interaction (the victim must open a malicious file). Multiple conne...

CVE-2025-30319 InDesign Desktop | NULL Pointer Dereference (CWE-476)

InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing a disruption in service. Exploitation of this issue...

CVE-2025-30310 Dreamweaver Desktop | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)

Dreamweaver Desktop versions 21.4 and earlier are affected by an Access of Resource Using Incompatible Type 'Type Confusion' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must...

CVE-2025-30310

Dreamweaver Desktop CVE-2025-30310 is a type confusion vulnerability in Dreamweaver Desktop 21.4 and earlier that allows arbitrary code execution in the current user context. Root cause is an Access of Resource Using Incompatible Type vulnerability; exploitation requires user interaction (the use...

PT-2025-21035 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Substance3D - Stager versions 3.1.1 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

Dassault Systèmes eDrawings Viewer OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

PT-2025-21018 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 29.3, 28.7.5 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction,...

PT-2025-21014 · Adobe · Photoshop

Name of the Vulnerable Software and Affected Versions: Photoshop Desktop versions 26.5, 25.12.2 and earlier Description: The issue is related to an Integer Overflow or Wraparound that could result in arbitrary code execution in the context of the current user. Exploitation requires user...

PT-2025-21013 · Adobe · Photoshop Desktop

Name of the Vulnerable Software and Affected Versions: Photoshop Desktop versions 26.5, 25.12.2 and earlier Description: The issue is an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

PT-2025-21015 · Adobe · Photoshop

Name of the Vulnerable Software and Affected Versions: Photoshop Desktop versions 26.5, 25.12.2 and earlier Description: The issue is an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...