Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:incopy:18.0:*:*:*:*:*:*:*

part: a version: 18.0 update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductIncopy (affa40e9-3814-5c6b-a854-29bc217806bd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-21599 vulnerable 2026-06-08 05:54:19.675975 Adobe InCopy Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
MEDIUM (5.5)
Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2023-01-13T00:00:00.000Z
Updated: 2025-03-05T19:34:13.542Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-21598 vulnerable 2026-06-08 05:54:19.675587 Adobe InCopy Font Parsing Use-After-Free Information Disclosure Vulnerability
MEDIUM (5.5)
Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2023-01-13T00:00:00.000Z
Updated: 2025-03-05T19:34:20.048Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-21597 vulnerable 2026-06-08 05:54:19.675175 Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (7.8)
Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2023-01-13T00:00:00.000Z
Updated: 2025-03-05T19:34:27.248Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-21596 vulnerable 2026-06-08 05:54:19.674756 Adobe InCopy Improper Input Validation Remote Code Execution Vulnerability
HIGH (7.8)
Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2023-01-13T00:00:00.000Z
Updated: 2025-03-05T19:34:34.823Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-21595 vulnerable 2026-06-08 05:54:19.674323 Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (7.8)
Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2023-01-13T00:00:00.000Z
Updated: 2025-03-05T19:34:42.059Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-21594 vulnerable 2026-06-08 05:54:19.673784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.