Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-9727

No fix known EPSS 3%CVSS 7.8

A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user.

Published 2020-09-10 · CVE record · OSV

Products: adobe indesign