TI-2019-05027 CVE-2019-7107 · GHSA-27r8-6jpp-p76v
Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing…
Priority HIGH 65
Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability.
Adobe
Records8047All Threatist records
Exploited (KEV)83In CISA KEV
CVSS critical1940CVSS 9.0–10.0
CVSS high3102CVSS 7.0–8.9
Exploited now
Adobe records in CISA KEVTI-2026-35762 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability TI-2026-50010 Adobe Commerce and Magento Incorrect Authorization Vulnerability TI-2026-52938 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability TI-2026-35688 Adobe ColdFusion Path Traversal Vulnerability TI-2009-03297 Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability TI-2020-07801 Adobe Acrobat Use-After-Free Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
202 records in Indesign · all components
TI-2017-08345 CVE-2017-11302 · GHSA-4f88-x3x5-4xc4
Memory corruption in Adobe InDesign 12.1.0 and earlier versions
Priority MEDIUM 51
An issue was discovered in Adobe InDesign 12.1.0 and earlier versions.
TI-2016-06630 CVE-2016-7886 · GHSA-x8p2-fmjc-76j3
Memory corruption in Adobe InDesign 11.4.1 and earlier, InDesign Server 11.0.0 and earlier
Priority MEDIUM 51
Adobe InDesign version 11.4.1 and earlier, Adobe InDesign Server 11.0.0 and earlier have an exploitable memory corruption vulnerability.
TI-2021-04203 CVE-2021-21099 · GHSA-33gg-2298-wmfp
Adobe InDesign PCX file parsing out-of-bounds write vulnerability could lead to remote code execution
Priority MEDIUM 49
Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.
TI-2021-04202 CVE-2021-21098 · GHSA-pjj6-f92r-2c8w
Adobe InDesign PCX file parsing out-of-bounds write vulnerability could lead to remote code execution
Priority MEDIUM 49
Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a crafted file.
TI-2020-07817 CVE-2020-9731 · GHSA-gjg7-84q3-g73j
Out-of-bounds memory access could lead to code execution
Priority MEDIUM 47
A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions).
TI-2022-12797 CVE-2022-30661 · GHSA-h2gh-88jm-27fg
Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Priority MEDIUM 46
Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2022-12794 CVE-2022-30658 · GHSA-7fgx-h8gw-6q4h
Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Priority MEDIUM 46
Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2021-18941 CVE-2021-42731 · GHSA-wqw8-8r4w-rccx
Adobe Indesign Buffer Overflow Could Lead to Remote Code Execution
Priority MEDIUM 44
Adobe InDesign versions 16.4 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted file.
TI-2021-17052 CVE-2021-39821 · GHSA-vqp5-m22r-c4f2
Adobe InDesign TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
Priority MEDIUM 44
Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) are affected by an out-of-bounds read vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2021-17051 CVE-2021-39820 · GHSA-fpr8-8mr7-5wxx
Adobe InDesign Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution
Priority MEDIUM 42
Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) is affected by an Out-of-bounds Write vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code executio…
TI-2021-14454 CVE-2021-36004 · GHSA-x6gj-2vp8-jhcw
Adobe InDesign CoolType out of bounds write vulnerability could lead to arbitrary stack manipulation
Priority MEDIUM 42
Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability in the CoolType library.
TI-2018-03496 CVE-2018-4928 · GHSA-27h2-5v2f-w3w2
Memory corruption in InDesign 13.0 and below
Priority MEDIUM 41
Adobe InDesign versions 13.0 and below have an exploitable Memory corruption vulnerability.
TI-2022-12801 CVE-2022-30665 · GHSA-6m8f-mh8j-c2cp
Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Priority MEDIUM 40
Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2022-12799 CVE-2022-30663 · GHSA-6r5c-g95x-q94r
Adobe InDesign SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Priority MEDIUM 40
Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2022-12798 CVE-2022-30662 · GHSA-785x-f4f8-wf7r
Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Priority MEDIUM 40
Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2022-12795 CVE-2022-30659 · GHSA-rq4v-vq83-2p7v
Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Priority MEDIUM 40
Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2021-20401 CVE-2021-45058 · GHSA-2ppg-mx5c-6pmw
Adobe InDesign JPEG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Priority MEDIUM 40
Adobe InDesign version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2021-20400 CVE-2021-45057 · GHSA-2wg7-qr5c-82cg
Adobe InDesign JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Priority MEDIUM 40
Adobe InDesign version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2020-07813 CVE-2020-9727 · GHSA-xr8r-7f7p-x5r5
Out-of-bounds memory access could lead to code execution
Priority MEDIUM 40
A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions).
TI-2018-03495 CVE-2018-4927 · GHSA-c4c3-f77q-3vh4
Untrusted search path in InDesign 13.0 and below
Priority MEDIUM 40
Adobe InDesign versions 13.0 and below have an exploitable Untrusted Search Path vulnerability.
TI-2021-17677 CVE-2021-40727 · GHSA-x335-2chq-v4r9
Adobe InDesign crashes when parsing the TIF file
Priority LOW 39
Access of Memory Location After End of Buffer (CWE-788
TI-2020-07816 CVE-2020-9730 · GHSA-h394-hp3g-742p
Out-of-bounds memory access could lead to code execution
Priority LOW 39
A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions).
TI-2020-07815 CVE-2020-9729 · GHSA-gwfc-jmfj-45pc
Out-of-bounds memory access could lead to code execution
Priority LOW 39
A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions).
TI-2020-07814 CVE-2020-9728 · GHSA-7qj7-wvx2-qxqv
Out-of-bounds memory access could lead to code execution
Priority LOW 39
A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions).