EUVD-2024-37942

Malicious code in bioql PyPI...

Adobe InDesign < 19.5.4 / 20.0 < 20.4.0 Multiple Arbitrary code execution (APSB25-60) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 19.5.4, 20.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-60 advisory. - InDesign Desktop versions 19.5.3 and earlier are affected by an Integer Underflow Wrap or Wraparound...

Adobe InDesign < 19.5.4 / 20.0 < 20.4.0 Multiple Arbitrary code execution (APSB25-60)

The version of Adobe InDesign installed on the remote Windows host is prior to 19.5.4, 20.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-60 advisory. - InDesign Desktop versions 19.5.3 and earlier are affected by an Integer Underflow Wrap or Wraparound...

Adobe InDesign < 19.5.4 / 20.0 < 20.3.0 Multiple Vulnerabilities (APSB25-53) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 19.5.4, 20.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-53 advisory. - InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds write vulnerabilit...

Adobe InDesign < 19.5.4 / 20.0 < 20.3.0 Multiple Vulnerabilities (APSB25-53)

The version of Adobe InDesign installed on the remote Windows host is prior to 19.5.4, 20.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-53 advisory. - InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds write...

Adobe InDesign < 19.5.3 / 20.0 < 20.3.0 Multiple Vulnerabilities (APSB25-37)

The version of Adobe InDesign installed on the remote Windows host is prior to 19.5.3, 20.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-37 advisory. - InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by an out-of-bounds write...

Adobe InDesign < 19.5.3 / 20.0 < 20.2.0 Multiple Vulnerabilities (APSB25-19)

The version of Adobe InDesign installed on the remote Windows host is prior to 19.5.3, 20.2.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-19 advisory. - Out-of-bounds Write CWE-787 potentially leading to Memory Leak CVE-2025-24452, CVE-2025-27178 - Heap-bas...

Adobe InDesign < 19.5.3 / 20.0 < 20.2.0 Multiple Vulnerabilities (APSB25-19) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 19.5.3, 20.2.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-19 advisory. - Out-of-bounds Write CWE-787 potentially leading to Memory Leak CVE-2025-24452, CVE-2025-27178 - Heap-based...

CVE-2025-21158

InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a maliciou...

Adobe InDesign < 19.5.2 / 20.0 < 20.1.0 Multiple Vulnerabilities (APSB25-01) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 19.5.2, 20.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-01 advisory. - InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow Wrap or...

Adobe InDesign < 19.5.2 / 20.0 < 20.1.0 Multiple Vulnerabilities (APSB25-01)

The version of Adobe InDesign installed on the remote Windows host is prior to 19.5.2, 20.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-01 advisory. - InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow Wrap or...

Adobe Releases Security Updates for Multiple Products

Adobe released security updates to address vulnerabilities in multiple Adobe software products including Adobe Acrobat, Adobe Illustrator, and Adobe InDesign. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and...

Adobe InDesign < 19.5.1 / 19.0 < 20.0.0 Multiple Vulnerabilities (APSB24-97) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 19.5.1, 20.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-97 advisory. - InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by a Heap-based Buffer Overflow...

Vulnerabilities fixed in Adobe InDesign

Adobe has fixed vulnerabilities in InDesign desktop applications Specifically for versions ID18.5.3, ID19.5 and earlier. The vulnerabilities are in the way the InDesign desktop applications handle specially crafted files. This can lead to a heap-based buffer overflow, which allows an attacker to...

Adobe InDesign < 18.5.4 / 19.0 < 20.0.0 Multiple Vulnerabilities (APSB24-88) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 18.5.4, 20.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-88 advisory. - InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by a Heap-based Buffer Overflow...

Adobe InDesign < 18.5.4 / 19.0 < 20.0.0 Multiple Vulnerabilities (APSB24-88)

The version of Adobe InDesign installed on the remote Windows host is prior to 18.5.4, 20.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-88 advisory. - InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by a Heap-based Buffer Overflow...

CVE-2021-39822 Adobe InDesign BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe InDesign versions 16.3 and earlier, and 16.3.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP...

Vulnerabilities fixed in Adobe InDesign

Adobe has fixed three vulnerabilities in Adobe Illustrator. A malicious party could potentially exploit the vulnerabilities to cause a denial-of-service DoS, or execute arbitrary code execute arbitrary code on the system under the application's privileges. The malicious party to do this must tric...