CVE-2025-27175

Summary

CVE-2025-27175 is a newly disclosed vulnerability that impacts Adobe InDesign Desktop versions ID20.1 and ID19.5.2, as well as older releases. This issue is classified as an out-of-bounds write vulnerability, which means it allows attackers to write data beyond the intended boundaries of a memory buffer. The consequence of this flaw is the potential for arbitrary code execution, granted in the context of the current user. To exploit this vulnerability, a victim must open a specially crafted file, making it essential that users apply the available patch as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.