
CVE-2025-27166 – InDesign Desktop | Out-of-bounds Write (CWE-787)
https://notcve.org/view.php?id=CVE-2025-27166
11 Mar 2025 — InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. • https://helpx.adobe.com/security/products/indesign/apsb25-19.html • CWE-787: Out-of-bounds Write •

CVE-2025-27175 – InDesign Desktop | Out-of-bounds Write (CWE-787)
https://notcve.org/view.php?id=CVE-2025-27175
11 Mar 2025 — InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. • https://helpx.adobe.com/security/products/indesign/apsb25-19.html • CWE-787: Out-of-bounds Write •

CVE-2025-27177 – InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
https://notcve.org/view.php?id=CVE-2025-27177
11 Mar 2025 — InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. • https://helpx.adobe.com/security/products/indesign/apsb25-19.html • CWE-122: Heap-based Buffer Overflow •

CVE-2025-27178 – InDesign Desktop | Out-of-bounds Write (CWE-787)
https://notcve.org/view.php?id=CVE-2025-27178
11 Mar 2025 — InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. • https://helpx.adobe.com/security/products/indesign/apsb25-19.html • CWE-787: Out-of-bounds Write •

CVE-2025-27176 – InDesign Desktop | NULL Pointer Dereference (CWE-476)
https://notcve.org/view.php?id=CVE-2025-27176
11 Mar 2025 — InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. • https://helpx.adobe.com/security/products/indesign/apsb25-19.html • CWE-476: NULL Pointer Dereference •

CVE-2025-24453 – InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
https://notcve.org/view.php?id=CVE-2025-24453
11 Mar 2025 — InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. • https://helpx.adobe.com/security/products/indesign/apsb25-19.html • CWE-122: Heap-based Buffer Overflow •

CVE-2025-24452 – InDesign Desktop | Out-of-bounds Write (CWE-787)
https://notcve.org/view.php?id=CVE-2025-24452
11 Mar 2025 — InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. • https://helpx.adobe.com/security/products/indesign/apsb25-19.html • CWE-787: Out-of-bounds Write •

CVE-2025-27171 – InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
https://notcve.org/view.php?id=CVE-2025-27171
11 Mar 2025 — InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. • https://helpx.adobe.com/security/products/indesign/apsb25-19.html • CWE-122: Heap-based Buffer Overflow •

CVE-2025-27179 – InDesign Desktop | NULL Pointer Dereference (CWE-476)
https://notcve.org/view.php?id=CVE-2025-27179
11 Mar 2025 — InDesign Desktop versions ID20.1, ID19.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. • https://helpx.adobe.com/security/products/indesign/apsb25-19.html • CWE-476: NULL Pointer Dereference •

CVE-2025-21126 – InDesign Desktop | Improper Input Validation (CWE-20)
https://notcve.org/view.php?id=CVE-2025-21126
11 Feb 2025 — InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service condition. An attacker could exploit this vulnerability to cause the application to crash, resulting in a denial of service. Exploitation of this issue requires user interaction in that a victim must open a malicious file. • https://helpx.adobe.com/security/products/indesign/apsb25-01.html • CWE-20: Improper Input Validation •