CVE-2025-47097

CVE-2025-47097 affects Adobe InCopy 20.3, 19.5.3 and earlier. It describes an Integer Underflow (Wrap or Wraparound) that could allow arbitrary code execution in the context of the current user, requiring the victim to open a malicious file (UI: Required, Attack Vector: Local). The CVSS v3.1 scor...

CVE-2025-47099

CVE-2025-47099 affects Adobe InCopy versions 20.3, 19.5.3 and earlier, due to a heap-based buffer overflow that could allow arbitrary code execution in the current user context. Exploitation requires user interaction (open a malicious file). Adobe released APSB25-59 to address critical vulnerabil...

CVE-2025-54216

Adobe InCopy (versions 20.4, 19.5.4 and earlier) is affected by an out-of-bounds write (CWE-787) vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a maliciously crafted file. Remediation involves ...

CVE-2026-34631

InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Affected product/version details are provided in bot...

CVE-2025-47098

Adobe InCopy is affected by CVE-2025-47098 (Access of Uninitialized Pointer) in versions 20.3, 19.5.3 and earlier, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Connected documents corroborate affe...

CVE-2025-54218

Summary: CVE-2025-54218 affects Adobe InCopy (versions 20.4, 19.5.4 and earlier). It is an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected components/...

CVE-2025-54219

CVE-2025-54219 affects Adobe InCopy: heap-based buffer overflow in InCopy versions 20.4, 19.5.4 and earlier. Root cause: improper memory handling leading to a heap overflow. Impact: arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must op...

CVE-2025-54223

Adobe InCopy versions 20.4, 19.5.4 and earlier are affected by a Use After Free vulnerability (CVE-2025-54223) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Public sources in the provided...

CVE-2025-54221

Summary: CVE-2025-54221 affects Adobe InCopy versions 20.4, 19.5.4 and earlier with an out-of-bounds write that can lead to arbitrary code execution in the context of the current user when a malicious file is opened. The issue requires user interaction. Concrete details from connected sources con...

CVE-2025-54220

CVE-2025-54220 affects Adobe InCopy versions 20.4, 19.5.4 and earlier, with a heap-based buffer overflow that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Public sources confirm this is tied t...

CVE-2025-61818

CVE-2025-61818 - Adobe InCopy is affected in versions 20.5, 19.5.5 and earlier by a Use-After-Free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a specially crafted malicious file. The conne...

CVE-2025-54217

CVE-2025-54217 affects Adobe InCopy (versions 20.4 and earlier, including 19.5.4 and earlier). The issue is a heap-based buffer overflow that can permit arbitrary code execution in the context of the current user, with exploitation requiring user interaction (victim must open a malicious file). R...

CVE-2026-27287

CVE-2026-27287 affects Adobe InCopy versions 20.5.2, 21.2 and earlier. It is an out-of-bounds read when parsing a crafted file, potentially allowing code execution in the context of the current user. Exploitation requires user interaction (the victim must open a malicious file); attack vector is ...

CVE-2025-61816

Adobe InCopy versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow (CVE-2025-61816) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (the user must open a malicious file). The issue is discussed alongsi...

CVE-2025-61817

Adobe InCopy is affected by CVE-2025-61817 (Use After Free) in versions 20.5, 19.5.5 and earlier, allowing arbitrary code execution in the current user context. Exploitation requires user interaction (opening a malicious file). CVSS v3.1 base score 7.8 (High) with Local attack vector, User Intera...