Skip to content
OpenAdvisories

Product · Adobe

InDesign Desktop

133 known vulnerabilities.

InDesign Desktop at a glance

Last 12 months
31
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 10 20 December 2025: 0 vulnerabilities Dec 2025 January 2026: 5 vulnerabilities February 2026: 3 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 9 vulnerabilities May 2026: 0 vulnerabilities June 2026: 12 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 2 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202620
Aug 202600
Jul 202600
Jun 2026120
May 202600
Apr 202690
Mar 202600
Feb 202630
Jan 202650
Dec 202500
Nov 202540
Oct 202500
Sep 202500
Aug 2025140
Jul 202560
Jun 202590
May 202530
Apr 202500
Mar 202590
Feb 202570
Jan 202500
Dec 202490

Latest advisories

  • High max 7.8
    NCSC-2026-0194 11 CVEs

    Kwetsbaarheden verholpen in Adobe InDesign Desktop

    Adobe heeft meerdere kwetsbaarheden verholpen in Adobe InDesign Desktop versies 21.3, 20.5.3 en eerdere versies.

  • High max 7.8

    Kwetsbaarheden verholpen in Adobe InDesign Desktop

    Adobe heeft kwetsbaarheden verholpen in InDesign Desktop (Specifiek voor versies 21.0, 19.5.5 en eerder).

  • High max 7.8

    Kwetsbaarheden verholpen in Adobe InDesign Desktop

    Adobe heeft kwetsbaarheden verholpen in InDesign Desktop (Specifiek voor versies ID19.5, ID18.5.4 en eerder).

133 results · Feed

  • Medium 5.5

    InDesign Desktop | NULL Pointer Dereference (CWE-476)

    InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of th…

  • Medium 5.5

    InDesign Desktop | NULL Pointer Dereference (CWE-476)

    InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of th…

  • High 7.8

    InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

    InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vict…

  • Medium 5.5

    InDesign Desktop | NULL Pointer Dereference (CWE-476)

    InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-se…

  • High 7.8

    InDesign Desktop | Stack-based Buffer Overflow (CWE-121)

    InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vic…

  • High 7.8

    InDesign Desktop | Out-of-bounds Write (CWE-787)

    InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mus…

  • High 7.8

    InDesign Desktop | Use After Free (CWE-416)

    InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open…

  • Medium 5.5

    InDesign Desktop | NULL Pointer Dereference (CWE-476)

    InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-se…

  • High 7.8

    InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

    InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vict…

  • High 7.8

    InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

    InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vict…

  • Medium 5.5

    InDesign Desktop | Out-of-bounds Read (CWE-125)

    InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this iss…

  • High 7.8

    InDesign Desktop | Stack-based Buffer Overflow (CWE-121)

    InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vic…

  • High 7.8

    InDesign Desktop | Out-of-bounds Write (CWE-787)

    InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mus…

  • High 7.8

    InDesign Desktop | Stack-based Buffer Overflow (CWE-121)

    InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vic…

  • High 7.8

    InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

    InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vict…

  • High 7.8

    InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

    InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vict…

  • High 7.8

    InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

    InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vict…

  • High 7.8

    InDesign Desktop | Out-of-bounds Read (CWE-125)

    InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to ex…

  • Medium 5.5

    InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

    InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application or disrupt its functionality.…

  • Medium 5.5

    InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

    InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of…

  • High 7.8

    InDesign Desktop | Use After Free (CWE-416)

    InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open…

  • High 7.8

    InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

    InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vict…

  • High 7.8

    InDesign Desktop | Out-of-bounds Write (CWE-787)

    InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mus…

  • Medium 5.5

    InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

    InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to serv…

  • Medium 5.5

    InDesign Desktop | Out-of-bounds Read (CWE-125)

    InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this i…

  • High 7.8

    InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

    InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vict…

  • High 7.8

    InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

    InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vict…

  • High 7.8

    InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

    InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vict…

  • High 7.8

    InDesign Desktop | Access of Uninitialized Pointer (CWE-824)

    InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that …

  • Medium 5.5

    InDesign Desktop | Out-of-bounds Read (CWE-125)

    InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitation of this iss…

  • High 7.8

    InDesign Desktop | Access of Uninitialized Pointer (CWE-824)

    InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that …

  • High 7.8

    InDesign Desktop | Use After Free (CWE-416)

    InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open…

  • High 7.8

    InDesign Desktop | Use After Free (CWE-416)

    InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open…

  • High 7.8

    InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

    InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vict…

  • High 7.8

    InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

    InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vict…

  • High 7.8

    InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

    InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vict…

  • High 7.8

    InDesign Desktop | Access of Uninitialized Pointer (CWE-824)

    InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that …

  • Medium 5.5

    InDesign Desktop | Out-of-bounds Read (CWE-125)

    InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • High 7.8

    InDesign Desktop | Use After Free (CWE-416)

    InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open…

  • High 7.8

    InDesign Desktop | Out-of-bounds Write (CWE-787)

    InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mus…