Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

65 records

Priority LOW 35

InCopy versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00178 Published 2026-06-09 Fixed in 21.4, 20.5.4 CWE-122
TI-2026-26950 CVE-2026-34706 · GHSA-vrf2-x73g-j53m

InCopy | Out-of-bounds Write (CWE-787)

Priority LOW 35

InCopy versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00139 Published 2026-06-09 Fixed in 21.4, 20.5.4 CWE-787
Priority LOW 35

InCopy versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00175 Published 2026-06-09 Fixed in 21.4, 20.5.4 CWE-121
TI-2026-26877 CVE-2026-34631 · GHSA-jx8w-6mv7-8qj4

InCopy | Out-of-bounds Write (CWE-787)

Priority LOW 35

InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00138 Published 2026-04-14 Fixed in 21.3, 20.5.3 CWE-787
TI-2026-21714 CVE-2026-27287 · GHSA-9fhw-q4vh-f5xw

InCopy | Out-of-bounds Read (CWE-125)

Priority LOW 35

InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00205 Published 2026-04-14 Fixed in 21.3, 20.5.3 CWE-125
Priority LOW 35

InCopy versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00228 Published 2026-01-13 Fixed in 21.1, 20.5.1 CWE-122
TI-2025-38207 CVE-2025-61818 · GHSA-rw38-rxpw-pv7c

InCopy | Use After Free (CWE-416)

Priority LOW 36

InCopy versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00248 Published 2025-11-11 No fix listed CWE-416
Priority LOW 36

InCopy versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00283 Published 2025-11-11 No fix listed CWE-122
TI-2025-38206 CVE-2025-61817 · GHSA-2q39-47wm-4cw8

InCopy | Use After Free (CWE-416)

Priority LOW 36

InCopy versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00248 Published 2025-11-11 No fix listed CWE-416
TI-2025-34047 CVE-2025-54216 · GHSA-q5h9-hc9q-q387

InCopy | Out-of-bounds Write (CWE-787)

Priority LOW 36

InCopy versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00275 Published 2025-08-12 No fix listed CWE-787
Priority LOW 36

InCopy versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00329 Published 2025-08-12 No fix listed CWE-122
TI-2025-34046 CVE-2025-54215 · GHSA-8pph-m53m-wh6x

InCopy | Out-of-bounds Write (CWE-787)

Priority LOW 36

InCopy versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00275 Published 2025-08-12 No fix listed CWE-787
TI-2025-34049 CVE-2025-54218 · GHSA-h98p-vh5q-r8r5

InCopy | Out-of-bounds Write (CWE-787)

Priority LOW 36

InCopy versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00275 Published 2025-08-12 No fix listed CWE-787
TI-2025-34054 CVE-2025-54223 · GHSA-jhph-5pxr-wj7f

InCopy | Use After Free (CWE-416)

Priority LOW 36

InCopy versions 20.4, 19.5.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00335 Published 2025-08-12 No fix listed CWE-416
Priority LOW 36

InCopy versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00329 Published 2025-08-12 No fix listed CWE-122
TI-2025-34052 CVE-2025-54221 · GHSA-rr28-9289-qwg2

InCopy | Out-of-bounds Write (CWE-787)

Priority LOW 36

InCopy versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00275 Published 2025-08-12 No fix listed CWE-787
Priority LOW 36

InCopy versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00329 Published 2025-08-12 No fix listed CWE-122
Priority LOW 35

InCopy versions 20.3, 19.5.3 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00228 Published 2025-07-08 No fix listed CWE-824
Priority LOW 35

InCopy versions 20.3, 19.5.3 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00228 Published 2025-07-08 No fix listed CWE-191
Priority LOW 36

InCopy versions 20.3, 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00251 Published 2025-07-08 No fix listed CWE-122
Priority LOW 36

InCopy versions 20.2, 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00257 Published 2025-06-10 No fix listed CWE-122
Priority LOW 36

InCopy versions 20.2, 19.5.3 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00234 Published 2025-06-10 No fix listed CWE-190
Priority LOW 36

InCopy versions 20.0, 19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00338 Published 2025-02-11 No fix listed CWE-191
Priority LOW 36

InCopy versions 19.4, 18.5.3 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution by an attacker.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00269 Published 2024-10-09 No fix listed CWE-434
Priority LOW 36

InCopy versions 18.5.2, 19.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00315 Published 2024-08-14 No fix listed CWE-190
Load more