CVE-2025-47106

InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

16 Jun 2025, 21:30

Type Values Removed Values Added
References () https://helpx.adobe.com/security/products/indesign/apsb25-53.html - () https://helpx.adobe.com/security/products/indesign/apsb25-53.html - Vendor Advisory
CPE cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
First Time Microsoft
Adobe
Microsoft windows
Adobe indesign
Apple
Apple macos

10 Jun 2025, 17:23

Type Values Removed Values Added
New CVE

Information

Published : 2025-06-10 17:23

Updated : 2025-06-16 21:30


NVD link : CVE-2025-47106

Mitre link : CVE-2025-47106


JSON object : View

Products Affected

microsoft

  • windows

apple

  • macos

adobe

  • indesign
CWE
CWE-416

Use After Free