CVE-2025-61824

Adobe InDesign Desktop is affected by a Heap-based Buffer Overflow vulnerability (CWE-122) in versions 20.5, 19.5.5 and earlier that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Connected sourc...

CVE-2026-27284

CVE-2026-27284 affects InDesign Desktop versions 20.5.2, 21.2 and earlier. It is an out-of-bounds read vulnerability (CWE-125) that occurs when parsing a crafted file, potentially causing code execution in the context of the current user. Exploitation requires user interaction (the victim must op...