GCVE - cpe:2.3:a:adobe:indesign:18.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:indesign:18.0:*:*:*:*:*:*:*

part: a version: 18.0 update: *

Vendor	Adobe (`fb293c1b-cab3-5565-9184-186e4ece530b`)
Product	Indesign (`161c68f4-a7c5-5b5d-abea-6f77cf2e5043`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-21593`	vulnerable	2026-06-08 05:54:19.666904	Adobe InDesign SVG file NULL Pointer Dereference Application denial-of-service MEDIUM (5.5) Adobe InDesign versions ID18.1 (and earlier) and ID17.4 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Published: 2023-02-17T00:00:00.000Z Updated: 2025-03-05T19:26:57.376Z Open on db.gcve.eu Reference links https://helpx.adobe.com/security/products/indesign/apsb23-12.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-21592`	vulnerable	2026-06-08 05:54:19.666551	Adobe InDesign Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability MEDIUM (5.5) Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Published: 2023-01-13T00:00:00.000Z Updated: 2025-03-05T19:34:58.259Z Open on db.gcve.eu Reference links https://helpx.adobe.com/security/products/indesign/apsb23-07.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-21591`	vulnerable	2026-06-08 05:54:19.666146	Adobe InDesign Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability MEDIUM (5.5) Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Published: 2023-01-13T00:00:00.000Z Updated: 2025-03-05T19:35:06.773Z Open on db.gcve.eu Reference links https://helpx.adobe.com/security/products/indesign/apsb23-07.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-21590`	vulnerable	2026-06-08 05:54:19.665755	Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability HIGH (7.8) Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Published: 2023-01-13T00:00:00.000Z Updated: 2025-03-05T19:35:17.136Z Open on db.gcve.eu Reference links https://helpx.adobe.com/security/products/indesign/apsb23-07.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-21589`	vulnerable	2026-06-08 05:54:19.665357	Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability HIGH (7.8) Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Published: 2023-01-13T00:00:00.000Z Updated: 2025-03-05T19:35:26.920Z Open on db.gcve.eu Reference links https://helpx.adobe.com/security/products/indesign/apsb23-07.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-21588`	vulnerable	2026-06-08 05:54:19.664926	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-21587`	vulnerable	2026-06-08 05:54:19.664386	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.