Vulnerability Database

296,172

Total vulnerabilities in the database

CVE-2025-43592

InDesign Desktop versions 19.5.3 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • Published: Jul 9, 2025
  • Updated: Jul 9, 2025
  • CVE: CVE-2025-43592
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
adobe / indesign - 19.5.4
adobe / indesign 20.0 20.4