CVE-2025-61814
published 2025-11-11CVE-2025-61814: InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context…
high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | indesign | <= 19.5.5 | — |
| adobe | indesign | >= 20.0 < 20.5.1 | 20.5.1 |
| adobe | indesign_desktop | <= 19.5.5 | — |