Read the docs

Adobe

Records8047All Threatist records
Exploited (KEV)83In CISA KEV
CVSS critical1940CVSS 9.0–10.0
CVSS high3102CVSS 7.0–8.9

Exploited now

Adobe records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

65 records in Incopy · all components

Priority MEDIUM 41

Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02833 Published 2022-06-16 No fix listed CWE-416
Priority MEDIUM 41

Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02833 Published 2022-06-16 No fix listed CWE-416
Priority MEDIUM 41

Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structur…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02583 Published 2022-06-16 No fix listed CWE-125
Priority MEDIUM 40

Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02229 Published 2022-06-16 No fix listed CWE-787
Priority LOW 39

Adobe InCopy version 16.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious GIF file, potentially resulting in arbitrary code execution in the context of the current u…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0167 Published 2021-11-22 No fix listed CWE-788
Priority LOW 37

Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00559 Published 2023-09-11 No fix listed CWE-416
Priority LOW 37

Adobe InCopy version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious XML file, potentially resulting in arbitrary code execution in the context of the current u…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01714 Published 2021-09-27 No fix listed CWE-788
Priority LOW 37

Adobe InCopy version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01714 Published 2021-09-27 No fix listed CWE-788
TI-2025-38207 CVE-2025-61818 · GHSA-rw38-rxpw-pv7c

InCopy | Use After Free (CWE-416)

Priority LOW 36

InCopy versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00248 Published 2025-11-11 No fix listed CWE-416
TI-2025-38206 CVE-2025-61817 · GHSA-2q39-47wm-4cw8

InCopy | Use After Free (CWE-416)

Priority LOW 36

InCopy versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00248 Published 2025-11-11 No fix listed CWE-416
Load more
Open these records in search →