Vulnerability Database

314,496

Total vulnerabilities in the database

CVE-2023-21592

Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • Published: Jan 13, 2023
  • Updated: Nov 16, 2025
  • CVE: CVE-2023-21592
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWEs:

Software From Fixed in
adobe / indesign 17.0 17.4.x
adobe / indesign 18.0 18.0.x