Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Adobe InDesign Desktop — helpx.adobe.com/security/products/indesign/apsb26-17.html Clear all filters
TI-2026-17261 CVE-2026-21358 · GHSA-f3pj-ph83-hp25

InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

Priority LOW 24

InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in application denial-of-service.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00189 Published 2026-02-10 Fixed in 21.2, 20.5.2 CWE-122
TI-2026-17236 CVE-2026-21332 · GHSA-q4j8-m85x-6r2m

InDesign Desktop | Out-of-bounds Read (CWE-125)

Priority LOW 24

InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00188 Published 2026-02-10 Fixed in 21.2, 20.5.2 CWE-125
TI-2026-17260 CVE-2026-21357 · GHSA-r8mq-23vx-xrgv

InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

Priority LOW 36

InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00259 Published 2026-02-10 Fixed in 21.2, 20.5.2 CWE-122