IN
Product
InDesign
202
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 123Medium 74Low 1
Watch
Add InDesign to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-30318 | 7.8 | May 13 | InDesign Desktop | Out-of-bounds Write (CWE-787) Affected: before 19.5.3; 20.0 before 20.3 |
| CVE-2025-27166 | 7.8 | Mar 11 | InDesign Desktop | Out-of-bounds Write (CWE-787) Affected: before 19.5.3; 20.0 before 20.2 |
| CVE-2025-27175 | 7.8 | Mar 11 | InDesign Desktop | Out-of-bounds Write (CWE-787) Affected: before 19.5.3; 20.0 before 20.2 |
| CVE-2025-27177 | 7.8 | Mar 11 | InDesign Desktop | Heap-based Buffer Overflow (CWE-122) Affected: before 19.5.3; 20.0 before 20.2 |
| CVE-2025-27178 | 7.8 | Mar 11 | InDesign Desktop | Out-of-bounds Write (CWE-787) Affected: before 19.5.3; 20.0 before 20.2 |
| CVE-2025-24453 | 7.8 | Mar 11 | InDesign Desktop | Heap-based Buffer Overflow (CWE-122) Affected: before 19.5.3; 20.0 before 20.2 |
| CVE-2025-24452 | 7.8 | Mar 11 | InDesign Desktop | Out-of-bounds Write (CWE-787) Affected: before 19.5.3; 20.0 before 20.2 |
| CVE-2025-27171 | 7.8 | Mar 11 | InDesign Desktop | Heap-based Buffer Overflow (CWE-122) Affected: before 19.5.3; 20.0 before 20.2 |
| CVE-2025-21158 | 7.8 | Feb 11 | InDesign Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191) Affected: before 19.5.2; 20.0 |
| CVE-2025-21123 | 7.8 | Feb 11 | InDesign Desktop | Heap-based Buffer Overflow (CWE-122) Affected: before 19.5.2; 20.0 |
| CVE-2025-21157 | 7.8 | Feb 11 | InDesign Desktop | Out-of-bounds Write (CWE-787) Affected: before 19.5.2; 20.0 |
| CVE-2025-21121 | 7.8 | Feb 11 | InDesign Desktop | Out-of-bounds Write (CWE-787) Affected: before 19.5.2; 20.0 |
| CVE-2024-49544 | 7.8 | Dec 10 | InDesign Desktop | Out-of-bounds Write (CWE-787) Affected: through 18.5.4; 19.0 before 19.5.1 |
| CVE-2024-49545 | 7.8 | Dec 10 | InDesign Desktop | Heap-based Buffer Overflow (CWE-122) Affected: through 18.5.4; 19.0 before 19.5.1 |
| CVE-2024-49543 | 7.8 | Dec 10 | InDesign Desktop | Stack-based Buffer Overflow (CWE-121) Affected: through 18.5.4; 19.0 before 19.5.1 |
| CVE-2024-49509 | 7.8 | Nov 12 | InDesign Desktop | Heap-based Buffer Overflow (CWE-122) Affected: before 18.5.4; 19.0 before 20.0 |
| CVE-2024-49507 | 7.8 | Nov 12 | InDesign Desktop | Heap-based Buffer Overflow (CWE-122) Affected: before 18.5.3; 19.0 before 20.0 |
| CVE-2024-49508 | 7.8 | Nov 12 | InDesign Desktop | Heap-based Buffer Overflow (CWE-122) Affected: before 18.5.3; 19.0 before 20.0 |
| CVE-2024-45137 | 7.8 | Oct 9 | InDesign Desktop | Unrestricted Upload of File with Dangerous Type (CWE-434) Affected: before 18.5.4; 19.0 before 19.5 |
| CVE-2024-41850 | 7.8 | Aug 14 | Adobe Indesign 2024 TIF File Parsing Heap Memory Corruption Affected: before 18.5.3; 19.0 before 19.5 |
| CVE-2024-39391 | 7.8 | Aug 14 | Adobe Indesign XLS File Parsing Out Of Bound Write Remote Code execution vulnerability Affected: before 18.5.3; 19.0 before 19.5 |
| CVE-2024-39390 | 7.8 | Aug 14 | Adobe Indesign 2024 DOC File Parsing Memory Corruption Affected: before 18.5.3; 19.0 before 19.5 |
| CVE-2024-41852 | 7.8 | Aug 14 | Adobe Indesign 2024 AVI File Parsing Stack Based Buffer Overflow Affected: before 18.5.3; 19.0 before 19.5 |
| CVE-2024-41853 | 7.8 | Aug 14 | Indesign 2024 EPS File Parsing Heap Memory Corruption Remote Code Execution Vulnerability Affected: before 18.5.3; 19.0 before 19.5 |
| CVE-2024-41851 | 7.8 | Aug 14 | Adobe InDesign (Beta) has an integer overflow vulnerability when parsing SVG file Affected: before 18.5.3; 19.0 before 19.5 |
| CVE-2024-39393 | 7.8 | Aug 14 | Adobe Indesign 2024 PCT File Parsing Memory Corruption Remote Code Execution Vulnerability Affected: before 18.5.3; 19.0 before 19.5 |
| CVE-2024-39389 | 7.8 | Aug 14 | Adobe Indesign PDF File Parsing Stack Based Buffer Overflow Remote Code Execution Vulnerability Affected: before 18.5.3; 19.0 before 19.5 |
| CVE-2024-39394 | 7.8 | Aug 14 | Adobe Indesign 2024 PDF File Parsing Out Of Bound Write Remote Code Execution Vulnerability Affected: before 18.5.3; 19.0 before 19.5 |
| CVE-2024-39392 | 7.8 | Aug 2 | Adobe Indesign 2024 EPS File Parsing Heap Memory Corruption Remote Code Execution Vulnerability Affected: before 18.5.3; 19.0 before 19.4 |
| CVE-2024-20781 | 7.8 | Jul 9 | Adobe Indesign TIF File Parsing Heap Memory Corruption Affected: before 18.5.3; 19.0 before 19.4 |
| CVE-2024-20785 | 7.8 | Jul 9 | Adobe Indesign 2024 TIFF File Parsing Memory Corruption Remote Code Execution vulnerability Affected: before 18.5.3; 19.0 before 19.4 |
| CVE-2024-20783 | 7.8 | Jul 9 | Adobe Indesign 2024 RLE File Parsing Heap Memory Corruption Affected: before 18.5.3; 19.0 before 19.4 |
| CVE-2024-20782 | 7.8 | Jul 9 | Adobe Indesign WMF File Parsing Out Of Bound Write Affected: before 18.5.3; 19.0 before 19.4 |
| CVE-2022-28831 | 7.8 | Sep 11 | Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: through 16.4.1; 17.0 through 17.1 |
| CVE-2022-28833 | 7.8 | Sep 11 | Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: through 16.4.1; 17.0 through 17.1 |
| CVE-2022-28832 | 7.8 | Sep 11 | Adobe InDesign Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability Affected: through 16.4.1; 17.0 through 17.1 |
| CVE-2021-39822 | 7.8 | Jul 20 | Adobe InDesign BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: through 16.3.2 |
| CVE-2023-29308 | 7.8 | Jul 12 | [FG-VD-23-009] Adobe InDesign 2023 Arbitrary Code Execution Vulnerability Notification Affected: through ID18.3 |
| CVE-2023-21590 | 7.8 | Jan 13 | Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of… Affected: 17.0 through 17.4; 18.0 |
| CVE-2023-21589 | 7.8 | Jan 13 | Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of… Affected: 17.0 through 17.4; 18.0 |
| CVE-2023-21588 | 7.8 | Jan 13 | Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the… Affected: 17.0 through 17.4; 18.0 |
| CVE-2023-21587 | 7.8 | Jan 13 | Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… Affected: 17.0 through 17.4; 18.0 |
| CVE-2022-38417 | 7.8 | Sep 16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read… Affected: 16.0 through 16.4.2; 17.0 through 17.3 |
| CVE-2022-38416 | 7.8 | Sep 16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read… Affected: 16.0 through 16.4.2; 17.0 through 17.3 |
| CVE-2022-38415 | 7.8 | Sep 16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… Affected: 16.0 through 16.4.2; 17.0 through 17.3 |
| CVE-2022-38414 | 7.8 | Sep 16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… Affected: 16.0 through 16.4.2; 17.0 through 17.3 |
| CVE-2022-38413 | 7.8 | Sep 16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… Affected: 16.0 through 16.4.2; 17.0 through 17.3 |
| CVE-2022-28853 | 7.8 | Sep 16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… Affected: 16.0 through 16.4.2; 17.0 through 17.3 |
| CVE-2022-28852 | 7.8 | Sep 16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… Affected: 16.0 through 16.4.2; 17.0 through 17.3 |
| CVE-2022-34247 | 7.8 | Jul 15 | Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an Out-Of-Bounds Write vulnerability that could result in arbitrary code execution in the… Affected: through 16.4.1; 17.0 through 17.2.1 |