Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

TI-2025-38204 CVE-2025-61815 · GHSA-8xj3-hm3h-9352

InDesign Desktop | Use After Free (CWE-416)

Priority LOW 36

InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00291 Published 2025-11-11 No fix listed CWE-416
TI-2025-38203 CVE-2025-61814 · GHSA-w46x-jpc8-7w3j

InDesign Desktop | Use After Free (CWE-416)

Priority LOW 36

InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00291 Published 2025-11-11 No fix listed CWE-416
Priority LOW 36

InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00332 Published 2025-11-11 No fix listed CWE-122
Priority LOW 36

InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00332 Published 2025-11-11 No fix listed CWE-122