Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-43478 State: PUBLISHED Published: 2025-11-04T01:15:53.439Z Last Updated: 2025-11-04T13:35:03.730Z Vendors: Apple Products: macOS Problem Types: An app may be able to cause unexpected system termination Description: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to cause unexpected system termination. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/125636 - https://support.apple.com/en-us/125635
CVE ID: CVE-2025-43479 State: PUBLISHED Published: 2025-11-04T01:16:41.477Z Last Updated: 2025-11-04T15:28:44.924Z Vendors: Apple Products: macOS Problem Types: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to access sensitive user data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/125636 - https://support.apple.com/en-us/125635
CVE ID: CVE-2025-43480 State: PUBLISHED Published: 2025-11-04T01:16:35.173Z Last Updated: 2025-11-04T15:35:07.321Z Vendors: Apple Products: Safari, tvOS, visionOS, watchOS, iOS and iPadOS Problem Types: A malicious website may exfiltrate data cross-origin Description: The issue was addressed with improved checks. This issue is fixed in Safari 26.1, visionOS 26.1, watchOS 26.1, iOS 26.1 and iPadOS 26.1, tvOS 26.1. A malicious website may exfiltrate data cross-origin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/125640 - https://support.apple.com/en-us/125637 - https://support.apple.com/en-us/125638 - https://support.apple.com/en-us/125639 -
ps://support.apple.com/en-us/125637 - https://support.apple.com/en-us/125638 - https://support.apple.com/en-us/125639 - https://support.apple.com/en-us/125632
CVE ID: CVE-2025-43481 State: PUBLISHED Published: 2025-11-04T01:15:57.414Z Last Updated: 2025-11-05T14:35:28.998Z Vendors: Apple Products: macOS Problem Types: An app may be able to break out of its sandbox Description: This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2. An app may be able to break out of its sandbox. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/125635
CVE ID: CVE-2025-43483 State: PUBLISHED Published: 2025-07-22T23:14:26.801Z Last Updated: 2025-07-23T20:11:12.870Z Vendors: HP Inc. Products: Poly Clariti Manager Problem Types: CWE-321 Description: A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow the retrieval of hardcoded cryptographic keys. HP has addressed the issue in the latest software update. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_12781425-12781447-16/hbsbpy04037
CVE ID: CVE-2025-43484 State: PUBLISHED Published: 2025-07-22T23:16:02.138Z Last Updated: 2025-07-23T20:11:43.688Z Vendors: HP Inc. Products: Poly Clariti Manager Problem Types: CWE-79 Description: A potential reflected cross-site scripting vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The website does not validate or sanitize the user input before rendering it in the response. HP has addressed the issue in the latest software update. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_12781425-12781447-16/hbsbpy04037
CVE ID: CVE-2025-43485 State: PUBLISHED Published: 2025-07-22T23:18:37.858Z Last Updated: 2025-07-23T14:58:30.540Z Vendors: HP Inc. Products: Poly Clariti Manager Problem Types: CWE-532 Description: A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The vulnerability could potentially allow a privileged user to retrieve credentials from the log files. HP has addressed the issue in the latest software update. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_12781425-12781447-16/hbsbpy04037
CVE ID: CVE-2025-43486 State: PUBLISHED Published: 2025-07-22T23:21:42.248Z Last Updated: 2025-07-23T14:56:14.596Z Vendors: HP Inc. Products: Poly Clariti Manager Problem Types: CWE-79 Description: A potential stored cross-site scripting vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The website allows user input to be stored and rendered without proper sanitization. HP has addressed the issue in the latest software update. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_12781425-12781447-16/hbsbpy04037
CVE ID: CVE-2025-43487 State: PUBLISHED Published: 2025-07-22T23:24:44.253Z Last Updated: 2025-07-23T13:18:02.474Z Vendors: HP Inc. Products: Poly Clariti Manager Problem Types: CWE-250 Description: A potential privilege escalation through Sudo vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The firmware flaw does not properly implement access controls. HP has addressed the issue in the latest software update. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_12781425-12781447-16/hbsbpy04037
CVE ID: CVE-2025-43488 State: PUBLISHED Published: 2025-07-22T23:26:24.451Z Last Updated: 2025-07-23T15:14:56.207Z Vendors: HP Inc. Products: Poly Clariti Manager Problem Types: CWE-79 Description: A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The vulnerability could allow a bypass of the application's XSS filter by submitting untrusted characters. HP has addressed the issue in the latest software update. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_12781425-12781447-16/hbsbpy04037
CVE ID: CVE-2025-43489 State: PUBLISHED Published: 2025-07-22T23:36:58.181Z Last Updated: 2025-07-23T15:14:51.346Z Vendors: HP Inc. Products: Poly Clariti Manager Problem Types: CWE-502 Description: A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could deserialize untrusted data without validation. HP has addressed the issue in the latest software update. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_12781425-12781447-16/hbsbpy04037
CVE ID: CVE-2025-43490 State: PUBLISHED Published: 2025-08-15T18:40:52.220Z Last Updated: 2025-09-11T16:39:00.904Z Vendors: HP, Inc. Products: HP Hotkey Support Software Problem Types: CWE-59 Description: A potential security vulnerability has been identified in the HPAudioAnalytics service included in the HP Hotkey Support software, which might allow escalation of privilege. HP is releasing software updates to mitigate the potential vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_12893367-12893393-16/hpsbhf04044
CVE ID: CVE-2025-43491 State: PUBLISHED Published: 2025-09-09T20:29:47.968Z Last Updated: 2025-09-11T03:56:33.896Z Vendors: HP, Inc. Products: Poly Lens Problem Types: CWE-99 Description: A vulnerability in the Poly Lens Desktop application running on the Windows platform might allow modifications to the filesystem, which might lead to SYSTEM level privileges being granted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_12979589-12979615-16/hpsbpy04048
CVE ID: CVE-2025-43493 State: PUBLISHED Published: 2025-11-04T01:17:45.738Z Last Updated: 2025-11-06T14:35:05.690Z Vendors: Apple Products: iOS and iPadOS Problem Types: Visiting a malicious website may lead to address bar spoofing Description: The issue was addressed with improved checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2. Visiting a malicious website may lead to address bar spoofing. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/125633
CVE ID: CVE-2025-43495 State: PUBLISHED Published: 2025-11-04T01:16:53.191Z Last Updated: 2025-11-05T18:33:38.650Z Vendors: Apple Products: iOS and iPadOS Problem Types: An app may be able to monitor keystrokes without user permission Description: The issue was addressed with improved checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2. An app may be able to monitor keystrokes without user permission. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/125633
CVE ID: CVE-2025-43496 State: PUBLISHED Published: 2025-11-04T01:16:40.410Z Last Updated: 2025-11-06T14:36:34.366Z Vendors: Apple Products: iOS and iPadOS Problem Types: Remote content may be loaded even when the 'Load Remote Images' setting is turned off Description: The issue was addressed by adding additional logic. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2. Remote content may be loaded even when the 'Load Remote Images' setting is turned off. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/125633
CVE ID: CVE-2025-43498 State: PUBLISHED Published: 2025-11-04T01:17:06.901Z Last Updated: 2025-11-04T17:50:31.237Z Vendors: Apple Products: macOS, visionOS, iOS and iPadOS Problem Types: An app may be able to access sensitive user data Description: An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, visionOS 26.1. An app may be able to access sensitive user data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/125636 - https://support.apple.com/en-us/125638 - https://support.apple.com/en-us/125635 - https://support.apple.com/en-us/12563
https://support.apple.com/en-us/125638 - https://support.apple.com/en-us/125635 - https://support.apple.com/en-us/125632
CVE ID: CVE-2025-43499 State: PUBLISHED Published: 2025-11-04T01:17:04.858Z Last Updated: 2025-11-05T18:33:39.277Z Vendors: Apple Products: iOS and iPadOS Problem Types: An app may be able to access sensitive user data Description: This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2. An app may be able to access sensitive user data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/125633
CVE ID: CVE-2025-43500 State: PUBLISHED Published: 2025-11-04T01:15:38.027Z Last Updated: 2025-11-04T16:32:50.183Z Vendors: Apple Products: visionOS, watchOS, iOS and iPadOS Problem Types: An app may be able to access sensitive user data Description: A privacy issue was addressed with improved handling of user preferences. This issue is fixed in watchOS 26.1, iOS 26.1 and iPadOS 26.1, visionOS 26.1. An app may be able to access sensitive user data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/125638 - https://support.apple.com/en-us/125639 - https://support.apple.com/en-us/125632
CVE ID: CVE-2025-43502 State: PUBLISHED Published: 2025-11-04T01:17:52.851Z Last Updated: 2025-11-04T14:47:59.138Z Vendors: Apple Products: Safari, visionOS, iOS and iPadOS Problem Types: An app may be able to bypass certain Privacy preferences Description: A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. An app may be able to bypass certain Privacy preferences. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/125640 - https://support.apple.com/en-us/125638 - https://support.apple.com/en-us/125632
CVE ID: CVE-2025-43503 State: PUBLISHED Published: 2025-11-04T01:17:38.232Z Last Updated: 2025-11-06T14:35:40.019Z Vendors: Apple Products: iOS and iPadOS Problem Types: Visiting a malicious website may lead to user interface spoofing Description: An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2. Visiting a malicious website may lead to user interface spoofing. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/125633
CVE ID: CVE-2025-43504 State: PUBLISHED Published: 2025-11-04T01:17:21.026Z Last Updated: 2025-11-04T13:07:19.240Z Vendors: Apple Products: Xcode Problem Types: A user in a privileged network position may be able to cause a denial-of-service Description: A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a privileged network position may be able to cause a denial-of-service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/125641
CVE ID: CVE-2025-43505 State: PUBLISHED Published: 2025-11-04T01:16:46.705Z Last Updated: 2025-11-05T04:55:21.833Z Vendors: Apple Products: Xcode Problem Types: Processing a maliciously crafted file may lead to heap corruption Description: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Xcode 26.1. Processing a maliciously crafted file may lead to heap corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/125641
CVE ID: CVE-2025-43507 State: PUBLISHED Published: 2025-11-04T01:16:03.906Z Last Updated: 2025-11-05T18:33:30.344Z Vendors: Apple Products: iOS and iPadOS Problem Types: An app may be able to fingerprint the user Description: A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2. An app may be able to fingerprint the user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/125633
CVE ID: CVE-2025-43515 State: PUBLISHED Published: 2025-11-13T19:03:39.301Z Last Updated: 2025-11-14T04:55:41.259Z Vendors: Apple Products: Compressor Problem Types: An unauthenticated user on the same network as a Compressor server may be able to execute arbitrary code Description: The issue was addressed by refusing external connections by default. This issue is fixed in Compressor 4.11.1. An unauthenticated user on the same network as a Compressor server may be able to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/125693
CVE ID: CVE-2025-43545 State: PUBLISHED Published: 2025-05-13T17:52:58.542Z Last Updated: 2025-05-13T18:29:58.736Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-824 Description: Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb25-44.html
CVE ID: CVE-2025-43546 State: PUBLISHED Published: 2025-05-13T17:52:59.454Z Last Updated: 2025-05-13T18:29:53.107Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-191 Description: Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb25-44.html
CVE ID: CVE-2025-43547 State: PUBLISHED Published: 2025-05-13T17:53:00.392Z Last Updated: 2025-05-13T18:29:46.737Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-190 Description: Bridge versions 15.0.3, 14.1.6 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb25-44.html
CVE ID: CVE-2025-43548 State: PUBLISHED Published: 2025-05-13T20:15:26.481Z Last Updated: 2025-05-15T04:01:21.563Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Dimension Problem Types: CWE-787 Description: Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb25-45.html
CVE ID: CVE-2025-43549 State: PUBLISHED Published: 2025-05-13T20:19:55.115Z Last Updated: 2025-05-15T04:01:30.043Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Substance3D - Stager Problem Types: CWE-416 Description: Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_stager/apsb25-46.html
CVE ID: CVE-2025-43550 State: PUBLISHED Published: 2025-06-10T19:11:33.642Z Last Updated: 2025-06-12T03:55:14.440Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/acrobat/apsb25-57.html
CVE ID: CVE-2025-43551 State: PUBLISHED Published: 2025-05-13T20:19:56.659Z Last Updated: 2025-05-14T15:56:09.006Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Substance3D - Stager Problem Types: CWE-125 Description: Substance3D - Stager versions 3.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/p
en a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d_stager/apsb25-46.html
CVE ID: CVE-2025-43553 State: PUBLISHED Published: 2025-05-13T20:24:23.668Z Last Updated: 2025-05-13T20:54:39.783Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Substance3D - Modeler Problem Types: CWE-427 Description: Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application relies on a search path to locate critical resources such as libraries or executables, an attacker could manipulate the search path to load a malicious resource, potentially executing arbitrary code. Exploitation o
cker could manipulate the search path to load a malicious resource, potentially executing arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-51.html
CVE ID: CVE-2025-43554 State: PUBLISHED Published: 2025-05-13T20:24:24.553Z Last Updated: 2025-05-13T20:54:54.810Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Substance3D - Modeler Problem Types: CWE-787 Description: Substance3D - Modeler versions 1.21.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-51.html
CVE ID: CVE-2025-43555 State: PUBLISHED Published: 2025-05-13T17:39:48.693Z Last Updated: 2025-05-13T18:09:59.747Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Animate Problem Types: CWE-191 Description: Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/animate/apsb25-42.html
CVE ID: CVE-2025-43556 State: PUBLISHED Published: 2025-05-13T17:39:50.252Z Last Updated: 2025-05-13T18:10:08.723Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Animate Problem Types: CWE-190 Description: Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/animate/apsb25-42.html
CVE ID: CVE-2025-43557 State: PUBLISHED Published: 2025-05-13T17:39:51.089Z Last Updated: 2025-05-13T18:10:18.772Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Animate Problem Types: CWE-824 Description: Animate versions 24.0.8, 23.0.11 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/animate/apsb25-42.html
CVE ID: CVE-2025-43558 State: PUBLISHED Published: 2025-06-10T16:23:02.620Z Last Updated: 2025-06-11T04:01:42.622Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Desktop Problem Types: CWE-787 Description: InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb25-53.html