GCVE - cpe:2.3:a:adobe:indesign:20.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:indesign:20.0:*:*:*:*:*:*:*

part: a version: 20.0 update: *

Vendor	Adobe (`fb293c1b-cab3-5565-9184-186e4ece530b`)
Product	Indesign (`161c68f4-a7c5-5b5d-abea-6f77cf2e5043`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-21158`	vulnerable	2026-06-08 07:08:51.316639	InDesign Desktop \| Integer Underflow (Wrap or Wraparound) (CWE-191) HIGH (7.8) InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Published: 2025-02-11T17:10:47.804Z Updated: 2026-02-26T19:09:14.593Z Open on db.gcve.eu Reference links https://helpx.adobe.com/security/products/indesign/apsb25-01.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-21157`	vulnerable	2026-06-08 07:08:51.316266	InDesign Desktop \| Out-of-bounds Write (CWE-787) HIGH (7.8) InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Published: 2025-02-11T17:10:45.344Z Updated: 2026-02-26T19:09:15.055Z Open on db.gcve.eu Reference links https://helpx.adobe.com/security/products/indesign/apsb25-01.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-21126`	vulnerable	2026-06-08 07:08:51.295594	InDesign Desktop \| Improper Input Validation (CWE-20) MEDIUM (5.5) InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service condition. An attacker could exploit this vulnerability to cause the application to crash, resulting in a denial of service. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Published: 2025-02-11T17:10:48.648Z Updated: 2025-02-12T20:51:45.534Z Open on db.gcve.eu Reference links https://helpx.adobe.com/security/products/indesign/apsb25-01.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-21125`	vulnerable	2026-06-08 07:08:51.295150	InDesign Desktop \| NULL Pointer Dereference (CWE-476) MEDIUM (5.5) InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Published: 2025-02-11T17:10:46.998Z Updated: 2025-02-12T20:51:45.918Z Open on db.gcve.eu Reference links https://helpx.adobe.com/security/products/indesign/apsb25-01.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-21124`	vulnerable	2026-06-08 07:08:51.294775	InDesign Desktop \| Out-of-bounds Read (CWE-125) MEDIUM (5.5) InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Published: 2025-02-11T17:10:43.616Z Updated: 2025-02-12T20:34:39.383Z Open on db.gcve.eu Reference links https://helpx.adobe.com/security/products/indesign/apsb25-01.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-21123`	vulnerable	2026-06-08 07:08:51.294281	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-21121`	vulnerable	2026-06-08 07:08:51.290803	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-49529`	vulnerable	2026-06-08 06:50:14.207798	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.