IN
Product
Indesign
202
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 123Medium 74Low 1
Watch
Add Indesign to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-28853 | 7.8 | Sep 16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… Affected: 16.0 through 16.4.2; 17.0 through 17.3 |
| CVE-2022-28852 | 7.8 | Sep 16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… Affected: 16.0 through 16.4.2; 17.0 through 17.3 |
| CVE-2022-34247 | 7.8 | Jul 15 | Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an Out-Of-Bounds Write vulnerability that could result in arbitrary code execution in the… Affected: through 16.4.1; 17.0 through 17.2.1 |
| CVE-2022-34246 | 7.8 | Jul 15 | Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in… Affected: through 16.4.1; 17.0 through 17.2.1 |
| CVE-2022-34245 | 7.8 | Jul 15 | Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in… Affected: through 16.4.1; 17.0 through 17.2.1 |
| CVE-2022-30665 | 7.8 | Jun 16 | Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… Affected: through 16.4.1; 17.2.0 through 17.2.1 |
| CVE-2022-30663 | 7.8 | Jun 16 | Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… Affected: through 16.4.1; 17.2.0 through 17.2.1 |
| CVE-2022-30662 | 7.8 | Jun 16 | Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… Affected: through 16.4.1; 17.2.0 through 17.2.1 |
| CVE-2022-30661 | 7.8 | Jun 16 | Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in… Affected: through 16.4.1; 17.2.0 through 17.2.1 |
| CVE-2022-30660 | 7.8 | Jun 16 | Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… Affected: through 16.4.1; 17.2.0 through 17.2.1 |
| CVE-2022-30659 | 7.8 | Jun 16 | Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… Affected: through 16.4.1; 17.2.0 through 17.2.1 |
| CVE-2022-30658 | 7.8 | Jun 16 | Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in… Affected: through 16.4.1; 17.2.0 through 17.2.1 |
| CVE-2021-42732 | 7.8 | Jun 15 | Access of Memory Location After End of Buffer (CWE-788) Affected: through 16.4 |
| CVE-2021-40727 | 7.8 | Jun 15 | Access of Memory Location After End of Buffer (CWE-788 Affected: through 16.3.2; through 16.3 |
| CVE-2021-39820 | 7.8 | Jun 15 | Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) is affected by an Out-of-bounds Write vulnerability due to insecure handling of a malicious TIFF file,… Affected: through 16.3.2; through 16.3 |
| CVE-2021-45058 | 7.8 | Jan 13 | Adobe InDesign version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user Affected: through 16.4 |
| CVE-2021-45057 | 7.8 | Jan 13 | Adobe InDesign version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user Affected: through 16.4 |
| CVE-2021-42731 | 7.8 | Nov 16 | Adobe InDesign versions 16.4 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted file Affected: through 16.4 |
| CVE-2021-39821 | 7.8 | Sep 29 | Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) are affected by an out-of-bounds read vulnerability that could result in arbitrary code execution in the… Affected: through 16.3.2; through 16.3 |
| CVE-2020-9731 | 7.8 | Sep 10 | A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions) Affected: through 15.1.1 |
| CVE-2020-9730 | 7.8 | Sep 10 | A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions) Affected: through 15.1.1 |
| CVE-2020-9729 | 7.8 | Sep 10 | A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions) Affected: through 15.1.1 |
| CVE-2020-9728 | 7.8 | Sep 10 | A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions) Affected: through 15.1.1 |
| CVE-2020-9727 | 7.8 | Sep 10 | A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions) Affected: through 15.1.1 |
| CVE-2018-4928 | 7.8 | May 19 | Adobe InDesign versions 13.0 and below have an exploitable Memory corruption vulnerability Affected: through 13.0 |
| CVE-2018-4927 | 7.8 | May 19 | Adobe InDesign versions 13.0 and below have an exploitable Untrusted Search Path vulnerability Affected: through 13.0 |
| CVE-2026-34704 | 5.5 | Jun 9 | InDesign Desktop | NULL Pointer Dereference (CWE-476) Affected: before 20.5.4; 21.0 before 21.4 |
| CVE-2026-34703 | 5.5 | Jun 9 | InDesign Desktop | NULL Pointer Dereference (CWE-476) Affected: before 20.5.4; 21.0 before 21.4 |
| CVE-2026-34705 | 5.5 | Jun 9 | InDesign Desktop | Out-of-bounds Read (CWE-125) Affected: before 20.5.4; 21.0 before 21.4 |
| CVE-2026-27285 | 5.5 | Apr 14 | InDesign Desktop | Heap-based Buffer Overflow (CWE-122) Affected: before 20.5.3; 21.0 before 21.3 |
| CVE-2026-27286 | 5.5 | Apr 14 | InDesign Desktop | Heap-based Buffer Overflow (CWE-122) Affected: before 20.5.3; 21.0 through 21.3 |
| CVE-2026-21358 | 5.5 | Feb 10 | InDesign Desktop | Heap-based Buffer Overflow (CWE-122) Affected: before 20.5.2; 21.0 before 21.2 |
| CVE-2026-21332 | 5.5 | Feb 10 | InDesign Desktop | Out-of-bounds Read (CWE-125) Affected: before 20.5.2; 21.0 before 21.2 |
| CVE-2026-21278 | 5.5 | Jan 13 | InDesign Desktop | Out-of-bounds Read (CWE-125) Affected: before 20.5.1; 21.0 before 21.1 |
| CVE-2025-54214 | 5.5 | Aug 12 | InDesign Desktop | Out-of-bounds Read (CWE-125) Affected: before 19.5.5; 20.0 before 20.5 |
| CVE-2025-54227 | 5.5 | Aug 12 | InDesign Desktop | Out-of-bounds Read (CWE-125) Affected: before 19.5.5; 20.0 before 20.5 |
| CVE-2025-54228 | 5.5 | Aug 12 | InDesign Desktop | Out-of-bounds Read (CWE-125) Affected: before 19.5.5; 20.0 before 20.5 |
| CVE-2025-47106 | 5.5 | Jun 10 | InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory Affected: before 19.5.4; 20.0 before 20.3 |
| CVE-2025-47105 | 5.5 | Jun 10 | InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory Affected: before 19.5.4; 20.0 before 20.3 |
| CVE-2025-47104 | 5.5 | Jun 10 | InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory Affected: before 19.5.4; 20.0 before 20.3 |
| CVE-2025-30321 | 5.5 | Jun 10 | InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service Affected: before 19.5.4; 20.0 before 20.3 |
| CVE-2025-30320 | 5.5 | May 13 | InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service Affected: before 19.5.3; 20.0 before 20.3 |
| CVE-2025-30319 | 5.5 | May 13 | InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service Affected: before 19.5.3; 20.0 before 20.3 |
| CVE-2025-27179 | 5.5 | Mar 11 | InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service Affected: before 19.5.3; 20.0 before 20.2 |
| CVE-2025-27176 | 5.5 | Mar 11 | InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service Affected: before 19.5.3; 20.0 before 20.2 |
| CVE-2025-21126 | 5.5 | Feb 11 | InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service condition Affected: before 19.5.2; 20.0 |
| CVE-2025-21125 | 5.5 | Feb 11 | InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service Affected: before 19.5.2; 20.0 |
| CVE-2025-21124 | 5.5 | Feb 11 | InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory Affected: before 19.5.2; 20.0 |
| CVE-2024-53952 | 5.5 | Dec 10 | InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service Affected: through 18.5.4; 19.0 through 19.5 |
| CVE-2024-53951 | 5.5 | Dec 10 | InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory Affected: through 18.5.4; 19.0 through 19.5 |