CVE-2026-27286

CVE-2026-27286 affects Adobe InDesign Desktop versions 20.5.2, 21.2 and earlier. The issue is a heap-based buffer overflow that could lead to memory exposure. Exploitation requires that a user opens a malicious file, indicating a user interaction prerequisite. Affected component is the InDesign D...

CVE-2025-47136

CVE-2025-47136 affects Adobe InDesign Desktop (versions 19.5.3 and earlier). The issue is an Integer Underflow (Wrap or Wraparound) in InDesign Desktop, enabling arbitrary code execution in the context of the current user when a user opens a malicious file. CVSSv3.1 metrics from the entry imply l...

CVE-2026-27291

CVE-2026-27291 affects Adobe InDesign Desktop. Affected versions: 20.5.2, 21.2 and earlier. The issue is an out-of-bounds write (CWE-787) that could permit arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically the victim opening a malici...

CVE-2026-34628

CVE-2026-34628 affects InDesign Desktop (versions 20.5.2, 21.2 and earlier). It is a heap-based buffer overflow (CWE-122) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically the victim opening a malicious file. The C...

CVE-2026-27283

CVE-2026-27283 : InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Use-After-Free (CWE-416) vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Affected produc...

CVE-2026-27284

CVE-2026-27284 affects InDesign Desktop versions 20.5.2, 21.2 and earlier. It is an out-of-bounds read vulnerability (CWE-125) that occurs when parsing a crafted file, potentially causing code execution in the context of the current user. Exploitation requires user interaction (the victim must op...