Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:incopy:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductIncopy (affa40e9-3814-5c6b-a854-29bc217806bd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-45136 vulnerable 2026-06-08 06:45:55.399950 InCopy | Unrestricted Upload of File with Dangerous Type (CWE-434)
HIGH (7.8)
InCopy versions 19.4, 18.5.3 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution by an attacker. An attacker could exploit this vulnerability by uploading a malicious file which can then be executed on the server. Exploitation of this issue requires user interaction.
Published: 2024-10-09T14:05:03.366Z
Updated: 2024-10-09T14:37:20.156Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26368 vulnerable 2026-06-08 05:57:39.543091 Adobe InCopy Out-of-Bounds Read Vulnerability v1.0
HIGH (7.8)
Adobe InCopy versions 18.5 (and earlier) and 17.4.2 (and earlier) are affected by are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2023-11-16T15:45:10.495Z
Updated: 2024-09-04T20:43:07.390Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.