202 matches found
CVE-2023-44347
Summary : CVE-2023-44347 affects Adobe InDesign versions ID18.5 and earlier, and ID17.4.2 and earlier, due to a NULL Pointer Dereference. This causes an application denial-of-service in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). The is...
CVE-2022-38415
Adobe InDesign CVE-2022-38415 is a heap-based buffer overflow in PCX file parsing that could allow arbitrary code execution when a user opens a crafted file. Affected versions include 16.4.2 and 17.3 (and earlier); exploitation requires user interaction. Connected documents corroborate the vulner...
CVE-2023-44343
Adobe InDesign is affected by CVE-2023-44343: an out-of-bounds read in ID18.5 and earlier and ID17.4.2 and earlier that can disclose memory and bypass ASLR. Exploitation requires user interaction (opening a malicious file). The issue is documented under APSB23-55 alongside several related CVEs (4...
CVE-2024-20781
Summary: Adobe InDesign Desktop (ID18.5.2, ID19.3 and earlier) is affected by a heap-based buffer overflow that could enable arbitrary code execution in the user’s context. Exploitation requires a user to open a malicious file. Connected advisories (APSB24-48) indicate a security update is availa...
CVE-2021-21098
CVE-2021-21098 affects Adobe InDesign 16.0 and earlier. A crafted file parsing leads to an out-of-bounds write, enabling remote code execution in the current user context. Exploitation requires user interaction (victim opens a malicious file). Public references from NVD/NDA indicate CVSS terms: C...
CVE-2022-28853
CVE-2022-28853 affects Adobe InDesign 16.x up to 16.4.2 and 17.x up to 17.3. The vulnerability is an out-of-bounds write that can lead to arbitrary code execution in the context of the current user, with exploitation requiring user interaction (victim must open a malicious file). Connected source...
CVE-2025-21126
The CVE-2025-21126 case concerns Adobe InDesign Desktop (ID20.0, ID19.5.1 and earlier) with an Improper Input Validation vulnerability that can cause an application crash and denial of service. Documents consistently describe the issue as requiring user interaction (victim opens a malicious file)...
CVE-2021-21099
Adobe InDesign (Windows/macOS) 16.0 and earlier is affected by an out-of-bounds write when parsing crafted files, enabling remote code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Multiple sources (NVD/NIST, CVE records, and...
CVE-2023-21592
Adobe InDesign (Windows/macOS) is affected by CVE-2023-21592, a font-parsing out-of-bounds read vulnerability that could disclose memory and bypass ASLR. Affected versions include 18.0 and earlier, and 17.4 and earlier. Exploitation requires user interaction (opening a malicious file). The issue ...
CVE-2024-20783
CVE-2024-20783 affects Adobe InDesign Desktop: ID19.3, ID18.5.2 and earlier. Affected component is a heap-based buffer overflow in InDesign that can lead to arbitrary code execution in the context of the current user when a victim opens a malicious file. Exploit requires user interaction (opening...
CVE-2025-21158
CVE-2025-21158 affects Adobe InDesign Desktop (ID20.0, ID19.5.1 and earlier). Root cause: integer underflow (wrap/wraparound) in a local-execution path that, with user interaction (open a malicious file), could lead to arbitrary code execution in the current user context. Affected component is In...
CVE-2025-24453
CVE-2025-24453 affects Adobe InDesign Desktop (ID20.1, ID19.5.2 and earlier) with a heap-based buffer overflow that can lead to arbitrary code execution in the user’s context. Exploitation requires user interaction (opening a malicious file). Several sources corroborate this issue and note affect...
CVE-2022-30672
Adobe InDesign is affected by CVE-2022-30672: an out-of-bounds read in versions 16.4.2 and earlier, and 17.3 and earlier. The vulnerability could disclose sensitive memory and enable bypass of mitigations like ASLR. Exploitation requires user interaction, as a victim must open a malicious file. N...
CVE-2022-38413
CVE-2022-38413 affects Adobe InDesign (16.x prior to 16.4.3 and 17.x prior to 17.4). It is a heap-based buffer overflow in SVG/file parsing that could allow arbitrary code execution in the context of the current user; exploitation requires user interaction (open a malicious file). Remediation ref...
CVE-2025-21124
Adobe InDesign CVE-2025-21124 affects InDesign Desktop versions ID20.0, ID19.5.1 and earlier with an out-of-bounds read vulnerability that could disclose sensitive memory and bypass mitigations such as ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected product/...
CVE-2022-38417
Adobe InDesign is affected by CVE-2022-38417: an out-of-bounds read when parsing a crafted file could allow code execution in the current user’s context. Affected: InDesign 16.4.2 and earlier; 17.3 and earlier. Exploitation requires user interaction (open a malicious file). Mitigation: update to ...
CVE-2025-24452
CVE-2025-24452 affects Adobe InDesign Desktop (IDs ID20.1, ID19.5.2 and earlier) and is caused by an out-of-bounds write in a vulnerable component, enabling arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file (user interaction). Ver...
CVE-2020-9731
CVE-2020-9731 describes a memory corruption/out-of-bounds access vulnerability in Adobe InDesign 15.1.1 and earlier when handling a malicious indd file, potentially enabling code execution in the user’s context. The issue is listed in the APSB20-52 advisory and widely referenced in OpenVAS/Nessus...
CVE-2024-41851
Summary (CVE-2024-41851): Adobe InDesign Desktop (ID19.4, ID18.5.2 and earlier) is affected by an Integer Overflow/Wraparound in parsing certain files, enabling arbitrary code execution in the context of the current user. Exploitation requires user interaction (open a malicious file). Affected pr...
CVE-2024-49529
CVE-2024-49529 affects Adobe InDesign Desktop versions 19.0, 20.0 and earlier with an out-of-bounds read that could disclose memory and bypass ASLR. Exploitation requires user interaction (open a malicious file). Public detail from multiple sources confirms this is a memory-leak/Out-of-bounds Rea...
CVE-2025-21123
CVE-2025-21123 affects Adobe InDesign Desktop (IDs 20.0, 19.5.1 and earlier). The issue is a heap-based buffer overflow in the application that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. P...
CVE-2022-38414
CVE-2022-38414 affects Adobe InDesign 16.x before 16.4.3 and 17.x before 17.4, with a heap-based buffer overflow in SVG/file parsing that could lead to arbitrary code execution. Exploitation requires user interaction (opening a malicious file). The available connected documents confirm the vulner...
CVE-2024-41850
CVE-2024-41850 is a vulnerability in Adobe InDesign Desktop, affecting versions ID19.4, ID18.5.2 and earlier. The issue is described as a heap-based buffer overflow that could allow arbitrary code execution in the context of the current user, with exploitation requiring user interaction (the vict...
CVE-2024-41852
CVE-2024-41852 affects Adobe InDesign Desktop for Windows, specifically ID19.4, ID18.5.2 and earlier. It is a stack-based buffer overflow that can enable arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). The CV...
CVE-2024-49543
CVE-2024-49543 affects Adobe InDesign Desktop versions ID19.5, ID18.5.4 and earlier. The issue is a stack-based buffer overflow that can lead to arbitrary code execution in the current user context. Exploitation requires user interaction (victim must open a malicious file). Connected sources corr...
CVE-2021-45057
Adobe InDesign 16.4 and earlier is affected by CVE-2021-45057 (JPEG2000 parsing out-of-bounds write), enabling arbitrary code execution in the context of the current user when a victim opens a malicious JPEG2000 file. Exploitation requires user interaction (opening a file). Multiple related advis...
CVE-2022-30671
CVE-2022-30671 affects Adobe InDesign 16.4.2 and earlier and 17.3 and earlier, due to an out-of-bounds read in parsing memory. This could disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). No patched version information is provided i...
CVE-2024-39390
Adobe InDesign Desktop prior to 18.5.3 and 19.0+ (ID19.4, ID18.5.2 and earlier) is affected by an out-of-bounds write that could allow arbitrary code execution with the user’s context after opening a malicious file. The advisory APSB24-56 and related advisories indicate updates are available to f...
CVE-2024-49507
Adobe InDesign Desktop (ID18.5.2, ID19.5 and earlier) is affected by a heap-based buffer overflow that can allow arbitrary code execution in the current user’s context. Exploitation requires user interaction (opening a malicious file). APSB24-88 and related advisories indicate updates to fixed bu...
CVE-2023-44344
CVE-2023-44344 affects Adobe InDesign versions ID18.5 and earlier and ID17.4.2 and earlier. It is an out-of-bounds read vulnerability that could disclose memory and potentially bypass mitigations such as ASLR. Exploitation requires user interaction (victim must open a malicious file). The CVSSv3....
CVE-2024-20782
Summary: Adobe InDesign Desktop vulnerable to an out-of-bounds write (affecting ID19.3, ID18.5.2 and earlier) that could lead to arbitrary code execution in the context of the current user. Attack prerequisite: user must open a malicious file. Impact: arbitrary code execution, under the user’s pr...
CVE-2024-39393
Adobe InDesign Desktop (ID19.4, ID18.5.2 and earlier) is affected by CVE-2024-39393 due to an out-of-bounds read while parsing crafted files, potentially allowing code execution in the caller’s context. Exploitation requires user interaction (victim opens a malicious file). Affected versions are ...
CVE-2024-49545
CVE-2024-49545 affects Adobe InDesign Desktop versions ID19.5, ID18.5.4 and earlier, causing a heap-based buffer overflow that could lead to arbitrary code execution in the current user context. Exploitation requires the user to open a malicious file (user interaction). Public references in the p...
CVE-2024-34127
Adobe InDesign Desktop: CVE-2024-34127 is an out-of-bounds read vulnerability in TIF file parsing affecting ID19.4, ID18.5.2 and earlier. Root cause is an out-of-bounds read that could disclose memory and bypass ASLR; exploitation requires user interaction (open a malicious file). Impact is memor...
CVE-2024-39391
CVE-2024-39391 affects Adobe InDesign Desktop versions ID19.4, ID18.5.2 and earlier. The issue is an out-of-bounds write that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Multiple connected so...
CVE-2025-27175
CVE-2025-27175 affects Adobe InDesign Desktop (ID20.1, ID19.5.2 and earlier). The issue is an out-of-bounds write in InDesign’s handling of a file, leading to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file...
CVE-2025-43590
CVE-2025-43590 affects Adobe InDesign Desktop versions ID20.2, ID19.5.3 and earlier, due to an out-of-bounds write that could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction (the victim must open a malicious file). Multiple sources (inclu...
CVE-2022-28857
Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Connected sources corroborate the same CVE-2022-28857 and des...
CVE-2023-44345
CVE-2023-44345 affects Adobe InDesign versions ID18.5 and earlier and ID17.4.2 and earlier. The issue is improper input validation causing application denial-of-service under the current user, with exploitation requiring user interaction (victim opens a malicious file). Connected documents corrob...
CVE-2023-44346
CVE-2023-44346 concerns Adobe InDesign. Affected: InDesign versions ID18.5 and earlier and ID17.4.2 and earlier. Vulnerability: out-of-bounds read that could disclose memory and bypass mitigations such as ASLR; exploitation requires user to open a malicious file. Connected advisories (APSB23-55) ...
CVE-2024-20785
Adobe InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a heap-based buffer overflow that could allow arbitrary code execution in the context of the current user when a victim opens a malicious file. Exploitation requires user interaction (open of a crafted file). Affected pr...
CVE-2024-49508
CVE-2024-49508 concerns InDesign Desktop. Affected: ID18.5.2, ID19.5 and earlier. Issue: a heap-based buffer overflow that can allow arbitrary code execution in the current user context. Exploitation requires user interaction (victim must open a malicious file). Connected sources confirm the vuln...
CVE-2020-9727
CVE-2020-9727 is a memory-corruption vulnerability in Adobe InDesign, affecting 15.1.1 and earlier. The issue arises from insecure handling of malicious .indd files, allowing out-of-bounds memory access that could lead to code execution in the user’s context. CONNECTED docs corroborate that the v...
CVE-2022-28854
CVE-2022-28854 affects Adobe InDesign 16.x (before 16.4.3) and 17.x (before 17.4). The issue is an out-of-bounds read that can disclose memory and potentially bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Public details across connected sources confirm the v...
CVE-2025-27171
CVE-2025-27171 affects Adobe InDesign Desktop (ID20.1, ID19.5.2 and earlier). The issue is a heap-based buffer overflow in InDesign components that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (the user must open a malicious file)...
CVE-2024-41853
CVE-2024-41853 – Adobe InDesign Desktop : A heap-based buffer overflow in InDesign Desktop (IDs ID19.4, ID18.5.2 and earlier) could allow arbitrary code execution in the user’s context. Exploitation requires user interaction—opening a malicious file. The CVSSv3.1 base score is 7.8 (High) with loc...
CVE-2022-28855
Adobe InDesign is affected by an out-of-bounds read vulnerability (CVE-2022-28855) in 16.x prior to 16.4.3 and 17.x prior to 17.4. The issue could disclose memory and potentially bypass mitigations such as ASLR. Exploitation requires a user to open a malicious file. The connected documents corrob...
CVE-2024-41866
Adobe InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could crash the application and cause a denial-of-service. Exploitation requires user interaction (victim opens a malicious file). The issue is listed among APSB24-56 and ass...
CVE-2025-27166
Adobe InDesign Desktop (ID20.1, ID19.5.2 and earlier) is affected by CVE-2025-27166: an out-of-bounds write that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Mitigation: Adobe’s APSB25-19 security updat...