CVE-20XX-?

Adobe Indesign CVEs.

Published CVEs affecting Adobe Indesign, ranked by exploit odds.

81 CVEs · updated 2026-11-06 01:30 UTC

  1. CVE-2025-21123

    InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  2. CVE-2025-54224

    InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  3. CVE-2025-54225

    InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  4. CVE-2025-54226

    InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  5. CVE-2025-54209

    InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  6. CVE-2025-30317

    InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  7. CVE-2025-43589

    InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  8. CVE-2025-61824

    InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  9. CVE-2025-61832

    InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  10. CVE-2025-24453

    InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  11. CVE-2025-27171

    InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  12. CVE-2025-27177

    InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  13. CVE-2025-21158

    InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  14. CVE-2025-54212

    InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  15. CVE-2025-54211

    InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  16. CVE-2025-47106

    InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    5.5 MEDIUM 0.3% exploit odds Fix listed
  17. CVE-2025-47134

    InDesign Desktop versions 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  18. CVE-2025-21124

    InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    5.5 MEDIUM 0.3% exploit odds Fix listed
  19. CVE-2025-43591

    InDesign Desktop versions 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  20. CVE-2025-47103

    InDesign Desktop versions 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  21. CVE-2025-61814

    InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  22. CVE-2025-61815

    InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  23. CVE-2025-30318

    InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  24. CVE-2025-21157

    InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  25. CVE-2025-24452

    InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  26. CVE-2025-54210

    InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  27. CVE-2025-54213

    InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  28. CVE-2025-54214

    InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    5.5 MEDIUM 0.3% exploit odds Fix listed
  29. CVE-2025-54227

    InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    5.5 MEDIUM 0.3% exploit odds Fix listed
  30. CVE-2025-54228

    InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    5.5 MEDIUM 0.3% exploit odds Fix listed
  31. CVE-2026-21277

    InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  32. CVE-2026-21304

    InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  33. CVE-2025-47104

    InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    5.5 MEDIUM 0.3% exploit odds Fix listed
  34. CVE-2025-47105

    InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    5.5 MEDIUM 0.3% exploit odds Fix listed
  35. CVE-2025-54207

    InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  36. CVE-2025-43558

    InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  37. CVE-2025-43590

    InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  38. CVE-2025-43593

    InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  39. CVE-2025-54206

    InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  40. CVE-2025-21121

    InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  41. CVE-2025-43592

    InDesign Desktop versions 19.5.3 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  42. CVE-2025-47136

    InDesign Desktop versions 19.5.3 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  43. CVE-2025-27166

    InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  44. CVE-2025-27175

    InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  45. CVE-2026-21357

    InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  46. CVE-2025-27178

    InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed
  47. CVE-2025-21125

    InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    5.5 MEDIUM 0.3% exploit odds Fix listed
  48. CVE-2025-30319

    InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing a disruption in service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    5.5 MEDIUM 0.3% exploit odds Fix listed
  49. CVE-2025-30320

    InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption in service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    5.5 MEDIUM 0.3% exploit odds Fix listed
  50. CVE-2026-21275

    InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Indesign

    7.8 HIGH 0.3% exploit odds Fix listed

All CVEs affecting Adobe Indesign that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.