Adobe Indesign Desktop vulnerabilities

CVE-2026-27291 [HIGH] CWE-787 CVE-2026-27291: InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write vulnerabil InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-34700 [HIGH] CWE-787 CVE-2026-34700: InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerabil InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-48293 [HIGH] CWE-787 CVE-2026-48293: InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerabil InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-61832 [HIGH] CWE-122 CVE-2025-61832: InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vuln InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-61824 [HIGH] CWE-122 CVE-2025-61824: InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vuln InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-61815 [HIGH] CWE-416 CVE-2025-61815: InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability th InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-61814 [HIGH] CWE-416 CVE-2025-61814: InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability th InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-54210 [HIGH] CWE-787 CVE-2025-54210: InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerabil InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-54213 [HIGH] CWE-787 CVE-2025-54213: InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerabil InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-54206 [HIGH] CWE-787 CVE-2025-54206: InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerabil InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-54208 [HIGH] CWE-787 CVE-2025-54208: InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerabil InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-49544 [HIGH] CWE-787 CVE-2024-49544: InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds write vulner InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-54226 [HIGH] CWE-416 CVE-2025-54226: InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Use After Free vulnerability th InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-54224 [HIGH] CWE-416 CVE-2025-54224: InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Use After Free vulnerability th InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-54225 [HIGH] CWE-416 CVE-2025-54225: InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Use After Free vulnerability th InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-21157 [HIGH] CWE-787 CVE-2025-21157: InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulner InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-24452 [HIGH] CWE-787 CVE-2025-24452: InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulner InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-21121 [HIGH] CWE-787 CVE-2025-21121: InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulner InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-27175 [HIGH] CWE-787 CVE-2025-27175: InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulner InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-27166 [HIGH] CWE-787 CVE-2025-27166: InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulner InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.