CVE-2025-27171

CVE-2025-27171 affects Adobe InDesign Desktop (ID20.1, ID19.5.2 and earlier). The issue is a heap-based buffer overflow in InDesign components that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (the user must open a malicious file)...

CVE-2021-45058

Adobe InDesign 16.4 and earlier are affected by CVE-2021-45058, an out-of-bounds write in JPEG parsing that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious JPEG). Remediation from APSB22-05 is to upgrade to InDes...

CVE-2021-45059

Adobe InDesign 16.4 and earlier is affected by CVE-2021-45059, a use-after-free in JPEG2000 processing that could disclose memory and bypass ASLR. Exploitation requires user interaction (open a malicious file). Remediation: update to InDesign 16.4.1 or later as indicated by APSB22-05.

CVE-2023-29312

Adobe InDesign is affected by an out-of-bounds read vulnerability (CVE-2023-29312) in versions ID18.3 and earlier and ID17.4.1 and earlier, potentially enabling memory disclosure and bypass of ASLR. Exploitation requires user interaction (open a malicious file). Affected products include InDesign...

CVE-2023-29314

Adobe InDesign is affected by an out-of-bounds read vulnerability (CVE-2023-29314) in versions ID18.3 and earlier, and ID17.4.1 and earlier, potentially allowing memory disclosure and bypass of ASLR. Exploitation requires user interaction (opening a malicious file). Related write/read out-of-boun...

CVE-2024-39394

Adobe InDesign Desktop (Windows/macOS) versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability (CVE-2024-39394) that could enable arbitrary code execution in the current user context. Exploitation requires the user to open a malicious file. A security update is ...

CVE-2024-39395

CVE-2024-39395 affects Adobe InDesign Desktop up to ID19.4 and ID18.5.2 and earlier, due to a NULL Pointer Dereference that can crash the application and cause a DoS. Exploitation requires user interaction, as a victim must open a malicious file. The vulnerability is listed with a CVSS v3.1 base ...

CVE-2024-45137

CVE-2024-45137 affects Adobe InDesign Desktop versions 19.4, 18.5.3 and earlier. The issue is an Unrestricted Upload of File with Dangerous Type that could allow an attacker to achieve arbitrary code execution when a malicious file is uploaded and executed. Exploitation requires user interaction....

CVE-2024-49509

Adobe InDesign Desktop (ID18.5.3, ID19.5 and earlier) is affected by a heap-based buffer overflow (CWE-122) that could allow arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. The issue is addressed in APSB24-88 with security upda...

CVE-2024-49511

CVE-2024-49511 describes an out-of-bounds read in Adobe InDesign Desktop for ID18.5.3, ID19.5, and earlier, which can disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (opening a malicious file). Connected documents confirm affected versions and the vulnerability c...

CVE-2024-53952

CVE-2024-53952 affects Adobe InDesign Desktop (ID19.5, ID18.5.4 and earlier) and is due to a NULL pointer dereference, causing application denial-of-service. Exploitation requires a user to open a malicious file, leading to a crash which qualifies as a DoS condition. Connected sources corroborate...

CVE-2020-9728

CVE-2020-9728 is a memory corruption vulnerability in Adobe InDesign 15.1.1 and earlier. The issue arises from insecure handling of malicious INDD files, causing out-of-bounds memory access and potentially code execution in the caller’s context. Public documents confirm this vulnerability and cor...

CVE-2023-29308

Adobe InDesign is affected by CVE-2023-29308 and related CVEs (229308-29319) due to an out-of-bounds write in versions ID18.3 and earlier and ID17.4.1 and earlier, enabling arbitrary code execution in the user context if a malicious file is opened. Exploitation requires user interaction. The Conn...

CVE-2023-29315

CVE-2023-29315 (Adobe InDesign) is an out-of-bounds read vulnerability affecting InDesign versions ID18.3 and earlier, and ID17.4.1 and earlier. The issue allows disclosure of sensitive memory and could bypass ASLR. Exploitation requires user interaction (victim opens a malicious file) and is rep...

CVE-2024-39389

CVE-2024-39389 (InDesign) affects InDesign Desktop ID19.4, ID18.5.2 and earlier. It is a stack-based buffer overflow in PDF file parsing that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Adobe’s AP...

CVE-2024-41854

Adobe InDesign CVE-2024-41854 describes an out-of-bounds read vulnerability in InDesign Desktop (IDs 19.4, 18.5.2 and earlier) that could disclose memory and bypass ASLR. Exploitation requires a user to open a malicious file. The issue is cited in multiple sources (APSB24-56 advisory; Nessus desc...

CVE-2024-49544

CVE-2024-49544 affects Adobe InDesign Desktop (ID19.5, ID18.5.4 and earlier). The issue is an out-of-bounds write that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction—victim must open a malicious file. Connected sources corroborate...

CVE-2025-43558

The CVE-2025-43558 entry applies to Adobe InDesign Desktop versions ID20.2, ID19.5.3 and earlier, with an out-of-bounds write vulnerability that could allow arbitrary code execution in the user’s context. Exploitation requires user interaction (victim must open a specially crafted file). The issu...

CVE-2016-7886

CVE-2016-7886 affects Adobe InDesign (desktop) version 11.4.1 and earlier and InDesign Server 11.0.0 and earlier. The issue is a memory corruption vulnerability that could allow arbitrary code execution on successful exploitation. The connected documents corroborate the vulnerable versions and im...

CVE-2020-9729

CVE-2020-9729 affects Adobe InDesign 15.1.1 and earlier; memory corruption via insecure handling of indd files can cause out-of-bounds access and potential code execution in the current user context. Mitigation per connected sources: update to InDesign 15.1.2 or later (APSB20-52). Exploitation de...

CVE-2023-47076

Adobe InDesign (versions 19.0 and earlier; 17.4.2 and earlier) is affected by a NULL Pointer Dereference vulnerability that can cause an application denial‑of‑service in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected products: InD...

CVE-2024-49549

CVE-2024-49549 affects Adobe InDesign Desktop versions ID19.5, ID18.5.4 and earlier. The vulnerability is an out-of-bounds read that could disclose sensitive memory and potentially bypass mitigations such as ASLR. Exploitation requires user interaction (the victim must open a malicious file). Mul...

CVE-2025-43593

Summary (CVE-2025-43593) : InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds write vulnerability that can lead to arbitrary code execution in the current user context. Exploitation requires user interaction (victim opens a malicious file). Multiple connected ...

CVE-2023-44342

Summary (CVE-2023-44342): Adobe InDesign versions ID18.5 and earlier, and ID17.4.2 and earlier are affected by an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected component is InDesign; root cause is an o...

CVE-2023-29311

CVE-2023-29311 affects Adobe InDesign versions ID18.3 and earlier and ID17.4.1 and earlier, with an out-of-bounds read that could disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). The connected sources indicate fixes in the InDesign...

CVE-2024-49512

CVE-2024-49512 affects Adobe InDesign Desktop (ID18.5.3, ID19.5 and earlier). It is an out-of-bounds read that could disclose memory and bypass ASLR; exploitation requires a user to open a malicious file. Connected sources confirm affected versions and impact; remediation is Adobe APSB24-88 secur...

CVE-2025-43589

Summary: CVE-2025-43589 affects Adobe InDesign Desktop, specifically versions ID20.2, ID19.5.3 and earlier. The issue is a Use-After-Free vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (the victim must open a mali...

CVE-2024-49510

CVE-2024-49510 is an out-of-bounds read vulnerability in Adobe InDesign Desktop versions ID18.5.3, ID19.5 and earlier, capable of memory disclosure and potential ASLR bypass. Exploitation requires the victim to open a malicious file, with local attack vector. Connected sources corroborate the con...

CVE-2024-53951

Adobe InDesign Desktop (ID19.5, ID18.5.4 and earlier) is affected by an out-of-bounds read vulnerability that can disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). The issue is documented across multiple sources (CVE-2024-53951; Ado...

CVE-2025-30317

InDesign Desktop (ID20.2, ID19.5.3 and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Several connected sources corroborate...

CVE-2025-47106

Affected product: Adobe InDesign Desktop (ID20.2, ID19.5.3 and earlier). The CVE-2025-47106 issue is a Use After Free vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Public details across connected sources confirm m...

CVE-2020-9730

CVE-2020-9730 describes a memory corruption vulnerability in Adobe InDesign 15.1.1 and earlier caused by insecure handling of malicious INDD files, which can lead to an out-of-bounds memory access and potentially code execution in the user context. The connected documents corroborate this as part...

CVE-2023-29313

CVE-2023-29313 concerns Adobe InDesign versions ID18.3 and earlier, and ID17.4.1 and earlier. The vulnerability is an out-of-bounds read that can disclose sensitive memory and potentially bypass ASLR. Exploitation requires user interaction: a victim must open a malicious file. Connected sources c...

CVE-2024-49546

CVE-2024-49546 affects Adobe InDesign Desktop versions ID19.5, ID18.5.4 and earlier with an out-of-bounds read that can disclose sensitive memory and bypass ASLR. Exploitation requires a user to open a malicious file. The issue is corroborated by NVD entry for this CVE and supported by the APSB24...

CVE-2024-49548

CVE-2024-49548 pertains to Adobe InDesign Desktop, affecting ID19.5, ID18.5.4 and earlier. The issue is an out-of-bounds read that can disclose sensitive memory and bypass mitigations like ASLR. Exploitation requires user interaction: the victim must open a malicious file. Public sources in the c...

CVE-2023-29309

CVE-2023-29309 affects Adobe InDesign versions ID18.3 and earlier, and ID17.4.1 and earlier. The issue is an out-of-bounds read in InDesign that can disclose sensitive memory and could bypass ASLR. Exploitation requires user interaction (victim opens a crafted file). Connected sources also refere...

CVE-2023-29310

CVE-2023-29310 affects Adobe InDesign up to ID18.3 (and earlier) and ID17.4.1 (and earlier). The issue is an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (opening a malicious file). Mitigation/patches are addressed by APSB23-38; remediation t...

CVE-2024-49547

CVE-2024-49547 affects Adobe InDesign Desktop variants ID19.5, ID18.5.4 and earlier. It is an out-of-bounds read vulnerability that could disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (opening a malicious file). Adobe released APSB24-97 with security updates; o...

CVE-2023-29318

Adobe InDesign is affected by CVE-2023-29318: out-of-bounds read in InDesign versions ID18.3 and earlier, and ID17.4.1 and earlier. The vulnerability could disclose sensitive memory and bypass ASLR; exploitation requires a user to open a malicious file. Affected product is the desktop InDesign su...

CVE-2024-39392

Adobe InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a Heap-based Buffer Overflow that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Affects InDesign on Windows/macOS per sources....

CVE-2024-39396

CVE-2024-39396 affects Adobe InDesign Desktop for ID18.5.2, ID19.3 and earlier, due to an out-of-bounds read in the PCX parsing path that can disclose memory. Exploitation requires user interaction (victim opens a malicious file). Mitigation details across connected sources indicate a patch path ...

CVE-2025-47104

InDesign Desktop, affected versions ID20.2, ID19.5.3 and earlier, suffer an out-of-bounds read that can disclose memory and bypass mitigations like ASLR. Exploitation requires user interaction (victim opens a malicious file). Adobe has issued a security update (APSB25-53) addressing these vulnera...

CVE-2025-47105

Adobe InDesign Desktop (Windows) is affected by an out-of-bounds read in ID20.2, ID19.5.3 and earlier, potentially leaking memory and bypassing ASLR. Exploitation requires a user to open a malicious file. Connected advisories confirm fixes in APSB25-53; users should upgrade to released patches (e...

CVE-2023-29319

CVE-2023-29319 affects Adobe InDesign 18.3 and earlier and 17.4.1 and earlier. The issue is an out‑of‑bounds read that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected versions are addressed in Adobe APSB23-38; patches are ava...

CVE-2026-34701

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a heap-based buffer overflow that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. The CVSSv3.1 base score is 7.8 ( HIGH ) with...

CVE-2023-29316

Adobe InDesign is affected by CVE-2023-29316: out-of-bounds read in InDesign versions ID18.3 and earlier and ID17.4.1 and earlier, potentially leaking memory and bypassing ASLR. Exploitation requires user interaction (open a malicious file). Connected sources corroborate the vulnerability and ref...

CVE-2023-29317

Adobe InDesign is affected by CVE-2023-29317: out-of-bounds read in InDesign versions ID18.3 and earlier, and ID17.4.1 and earlier, potentially exposing memory and bypassing ASLR. Exploitation requires the user to open a malicious file. Remediation is provided by APSB23-38 updates; NCSC/CNVD/NVD ...

CVE-2025-30319

The CVE-2025-30319 issue affects Adobe InDesign Desktop versions ID19.5.2, ID20.2 and earlier, as listed in multiple feeds. The vulnerability is a NULL Pointer Dereference that can cause an application denial-of-service. Exploitation requires user interaction: a victim must open a malicious file....

CVE-2025-43594

CVE-2025-43594 affects Adobe InDesign Desktop up to version 19.5.3 (and earlier). The vulnerability is an out-of-bounds write that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The CVSSv3.1 bas...

CVE-2023-47077

Adobe InDesign CVE-2023-47077 affects InDesign 19.0 and earlier and 17.4.2 and earlier. The issue is an out-of-bounds read that can disclose memory content and bypass ASLR, with exploitation requiring user interaction (victim opens a malicious file). Publicly documented impact is memory disclosur...