CVE-2025-54215

CVE-2025-54215 affects Adobe InCopy versions 20.4, 19.5.4 and earlier. It is an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution in the user’s context. Exploitation requires user interaction—opening a maliciously crafted file. Public references indicate a se...

CVE-2025-47099

CVE-2025-47099 affects Adobe InCopy versions 20.3, 19.5.3 and earlier, due to a heap-based buffer overflow that could allow arbitrary code execution in the current user context. Exploitation requires user interaction (open a malicious file). Adobe released APSB25-59 to address critical vulnerabil...

CVE-2025-54216

Adobe InCopy (versions 20.4, 19.5.4 and earlier) is affected by an out-of-bounds write (CWE-787) vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a maliciously crafted file. Remediation involves ...

CVE-2025-47098

Adobe InCopy is affected by CVE-2025-47098 (Access of Uninitialized Pointer) in versions 20.3, 19.5.3 and earlier, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Connected documents corroborate affe...

CVE-2026-34631

InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Affected product/version details are provided in bot...

CVE-2025-54218

Summary: CVE-2025-54218 affects Adobe InCopy (versions 20.4, 19.5.4 and earlier). It is an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected components/...

CVE-2025-54219

CVE-2025-54219 affects Adobe InCopy: heap-based buffer overflow in InCopy versions 20.4, 19.5.4 and earlier. Root cause: improper memory handling leading to a heap overflow. Impact: arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must op...

CVE-2025-54223

Adobe InCopy versions 20.4, 19.5.4 and earlier are affected by a Use After Free vulnerability (CVE-2025-54223) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Public sources in the provided...

CVE-2025-54220

CVE-2025-54220 affects Adobe InCopy versions 20.4, 19.5.4 and earlier, with a heap-based buffer overflow that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Public sources confirm this is tied t...

CVE-2025-54221

Summary: CVE-2025-54221 affects Adobe InCopy versions 20.4, 19.5.4 and earlier with an out-of-bounds write that can lead to arbitrary code execution in the context of the current user when a malicious file is opened. The issue requires user interaction. Concrete details from connected sources con...

CVE-2025-54217

CVE-2025-54217 affects Adobe InCopy (versions 20.4 and earlier, including 19.5.4 and earlier). The issue is a heap-based buffer overflow that can permit arbitrary code execution in the context of the current user, with exploitation requiring user interaction (victim must open a malicious file). R...

CVE-2025-61818

CVE-2025-61818 - Adobe InCopy is affected in versions 20.5, 19.5.5 and earlier by a Use-After-Free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a specially crafted malicious file. The conne...

CVE-2026-27287

CVE-2026-27287 affects Adobe InCopy versions 20.5.2, 21.2 and earlier. It is an out-of-bounds read when parsing a crafted file, potentially allowing code execution in the context of the current user. Exploitation requires user interaction (the victim must open a malicious file); attack vector is ...

CVE-2025-61816

Adobe InCopy versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow (CVE-2025-61816) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (the user must open a malicious file). The issue is discussed alongsi...

CVE-2025-61817

Adobe InCopy is affected by CVE-2025-61817 (Use After Free) in versions 20.5, 19.5.5 and earlier, allowing arbitrary code execution in the current user context. Exploitation requires user interaction (opening a malicious file). CVSS v3.1 base score 7.8 (High) with Local attack vector, User Intera...