Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-54175 State: PUBLISHED Published: 2025-08-20T12:53:23.786Z Last Updated: 2025-08-20T15:09:58.968Z Vendors: OpenSolution Products: Quick.CMS.EXT Problem Types: CWE-79 Description: QuickCMS.EXT is vulnerable to Reflected XSS in sFileName parameter in thumbnail viewer functionality. An attacker can craft a malicious URL that results in arbitrary JavaScript execution in the victim's browser when opened. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable. Additional Analyst Notes
ested and confirmed as vulnerable, other versions were not tested and might also be vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/posts/2025/08/CVE-2025-54172 - https://opensolution.org/professional-cms-system-quick-cms-ext.html
CVE ID: CVE-2025-54186 State: PUBLISHED Published: 2025-08-12T20:36:11.649Z Last Updated: 2025-08-12T20:49:49.611Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Substance3D - Modeler Problem Types: CWE-125 Description: Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-76.html
CVE ID: CVE-2025-54187 State: PUBLISHED Published: 2025-08-12T20:44:27.877Z Last Updated: 2025-08-14T03:56:08.314Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Substance3D - Painter Problem Types: CWE-787 Description: Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_painter/apsb25-77.html
CVE ID: CVE-2025-54188 State: PUBLISHED Published: 2025-08-12T20:44:30.467Z Last Updated: 2025-08-13T20:07:13.752Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Substance3D - Painter Problem Types: CWE-125 Description: Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_painter/apsb25-77.html
CVE ID: CVE-2025-54189 State: PUBLISHED Published: 2025-08-12T20:44:24.546Z Last Updated: 2025-08-13T20:12:22.232Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Substance3D - Painter Problem Types: CWE-125 Description: Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_painter/apsb25-77.html
CVE ID: CVE-2025-54190 State: PUBLISHED Published: 2025-08-12T20:44:26.918Z Last Updated: 2025-08-13T14:11:43.607Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Substance3D - Painter Problem Types: CWE-125 Description: Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_painter/apsb25-77.html
CVE ID: CVE-2025-54191 State: PUBLISHED Published: 2025-08-12T20:44:26.157Z Last Updated: 2025-08-13T14:13:24.091Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Substance3D - Painter Problem Types: CWE-125 Description: Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_painter/apsb25-77.html
CVE ID: CVE-2025-54192 State: PUBLISHED Published: 2025-08-12T20:44:23.748Z Last Updated: 2025-08-13T20:12:31.865Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Substance3D - Painter Problem Types: CWE-125 Description: Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_painter/apsb25-77.html
CVE ID: CVE-2025-54193 State: PUBLISHED Published: 2025-08-12T20:44:29.688Z Last Updated: 2025-08-13T20:07:20.101Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Substance3D - Painter Problem Types: CWE-125 Description: Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_painter/apsb25-77.html
CVE ID: CVE-2025-54194 State: PUBLISHED Published: 2025-08-12T20:44:28.908Z Last Updated: 2025-08-13T20:07:29.433Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Substance3D - Painter Problem Types: CWE-125 Description: Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_painter/apsb25-77.html
CVE ID: CVE-2025-54195 State: PUBLISHED Published: 2025-08-12T20:44:25.371Z Last Updated: 2025-08-13T14:13:59.852Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Substance3D - Painter Problem Types: CWE-125 Description: Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_painter/apsb25-77.html
CVE ID: CVE-2025-54196 State: PUBLISHED Published: 2025-10-14T21:53:31.387Z Last Updated: 2025-10-15T20:24:09.898Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Adobe Products: Adobe Connect Problem Types: CWE-601 Description: Adobe Connect versions 12.9 and earlier are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction in that a victim must click on a crafted link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/connect/apsb25-70.htm
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/connect/apsb25-70.html
CVE ID: CVE-2025-54197 State: PUBLISHED Published: 2025-08-12T20:36:12.449Z Last Updated: 2025-08-12T20:49:18.614Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Substance3D - Modeler Problem Types: CWE-125 Description: Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-76.html
CVE ID: CVE-2025-54198 State: PUBLISHED Published: 2025-08-12T20:36:03.774Z Last Updated: 2025-08-13T14:18:06.153Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Substance3D - Modeler Problem Types: CWE-125 Description: Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-76.html
CVE ID: CVE-2025-54199 State: PUBLISHED Published: 2025-08-12T20:36:05.890Z Last Updated: 2025-08-13T20:13:14.142Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Substance3D - Modeler Problem Types: CWE-125 Description: Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-76.html
CVE ID: CVE-2025-54200 State: PUBLISHED Published: 2025-08-12T20:36:09.207Z Last Updated: 2025-08-13T20:12:41.787Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Substance3D - Modeler Problem Types: CWE-125 Description: Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-76.html
CVE ID: CVE-2025-54201 State: PUBLISHED Published: 2025-08-12T20:36:04.620Z Last Updated: 2025-08-13T14:14:37.256Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Substance3D - Modeler Problem Types: CWE-125 Description: Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-76.html
CVE ID: CVE-2025-54202 State: PUBLISHED Published: 2025-08-12T20:36:06.687Z Last Updated: 2025-08-13T20:13:07.598Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Substance3D - Modeler Problem Types: CWE-125 Description: Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-76.html
CVE ID: CVE-2025-54203 State: PUBLISHED Published: 2025-08-12T20:36:10.023Z Last Updated: 2025-08-12T20:50:58.282Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Substance3D - Modeler Problem Types: CWE-125 Description: Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-76.html
CVE ID: CVE-2025-54204 State: PUBLISHED Published: 2025-08-12T20:36:08.323Z Last Updated: 2025-08-13T20:12:52.119Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Substance3D - Modeler Problem Types: CWE-125 Description: Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-76.html
CVE ID: CVE-2025-54205 State: PUBLISHED Published: 2025-08-12T20:48:51.542Z Last Updated: 2025-08-13T20:06:50.032Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Substance3D - Sampler Problem Types: CWE-125 Description: Substance3D - Sampler versions 5.0.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d-sampler/apsb25-78.html
CVE ID: CVE-2025-54206 State: PUBLISHED Published: 2025-08-12T20:54:51.479Z Last Updated: 2025-08-14T03:55:33.047Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Desktop Problem Types: CWE-787 Description: InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb25-79.html
CVE ID: CVE-2025-54207 State: PUBLISHED Published: 2025-08-12T20:55:01.275Z Last Updated: 2025-08-14T03:55:37.590Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Desktop Problem Types: CWE-824 Description: InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb25-79.html
CVE ID: CVE-2025-54208 State: PUBLISHED Published: 2025-08-12T20:54:55.490Z Last Updated: 2025-08-14T03:55:34.176Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Desktop Problem Types: CWE-787 Description: InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb25-79.html
CVE ID: CVE-2025-54209 State: PUBLISHED Published: 2025-08-12T20:54:56.266Z Last Updated: 2025-08-14T03:55:38.678Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Desktop Problem Types: CWE-122 Description: InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb25-79.html
CVE ID: CVE-2025-54210 State: PUBLISHED Published: 2025-08-12T20:54:57.814Z Last Updated: 2025-08-14T03:55:35.335Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Desktop Problem Types: CWE-787 Description: InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb25-79.html
CVE ID: CVE-2025-54211 State: PUBLISHED Published: 2025-08-12T20:55:02.152Z Last Updated: 2025-08-14T03:55:41.165Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Desktop Problem Types: CWE-122 Description: InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb25-79.html
CVE ID: CVE-2025-54212 State: PUBLISHED Published: 2025-08-12T20:54:52.282Z Last Updated: 2025-08-14T03:55:42.425Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Desktop Problem Types: CWE-122 Description: InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb25-79.html
CVE ID: CVE-2025-54213 State: PUBLISHED Published: 2025-08-12T20:54:58.607Z Last Updated: 2025-08-14T03:55:36.465Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Desktop Problem Types: CWE-787 Description: InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb25-79.html
CVE ID: CVE-2025-54214 State: PUBLISHED Published: 2025-08-12T20:55:00.442Z Last Updated: 2025-08-13T20:06:09.020Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: InDesign Desktop Problem Types: CWE-125 Description: InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb25-79.html
CVE ID: CVE-2025-54215 State: PUBLISHED Published: 2025-08-12T21:01:34.243Z Last Updated: 2025-08-14T03:55:13.601Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-787 Description: InCopy versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/apsb25-80.html
CVE ID: CVE-2025-54216 State: PUBLISHED Published: 2025-08-12T21:01:35.837Z Last Updated: 2025-08-14T03:55:14.762Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-787 Description: InCopy versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/apsb25-80.html
CVE ID: CVE-2025-54217 State: PUBLISHED Published: 2025-08-12T21:01:35.047Z Last Updated: 2025-08-14T03:55:18.205Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-122 Description: InCopy versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/apsb25-80.html
CVE ID: CVE-2025-54218 State: PUBLISHED Published: 2025-08-12T21:01:32.983Z Last Updated: 2025-08-14T03:55:15.913Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-787 Description: InCopy versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/apsb25-80.html
CVE ID: CVE-2025-54219 State: PUBLISHED Published: 2025-08-12T21:01:31.401Z Last Updated: 2025-08-14T03:55:19.325Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-122 Description: InCopy versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/apsb25-80.html