CVE-2023-21598

CVE-2023-21598 – Adobe InCopy Use-After-Free : Connected sources corroborate a memory disclosure vulnerability in InCopy versions 18.0 and earlier, and 17.4 and earlier. The underlying issue is a Use-After-Free flaw that can bypass mitigations such as ASLR, with exploitation requiring user intera...

CVE-2023-21598 Adobe InCopy Font Parsing Use-After-Free Information Disclosure Vulnerability

Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that...

Adobe InCopy < 17.4.1 / 18.0 < 18.1.0 Multiple Vulnerabilities (APSB23-08)

The version of Adobe InCopy installed on the remote host is prior to 17.4.1, 18.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-08 advisory. - Adobe InCopy versions 18.0 and earlier, 17.4 and earlier are affected by an out-of-bounds write vulnerability that...