CVE-2025-27178

Summary

CVE-2025-27178 is a newly disclosed vulnerability affecting Adobe InDesign Desktop versions ID20.1, ID19.5.2, and older. This issue involves an out-of-bounds write vulnerability, which can permit arbitrary code execution. The exploitation of this flaw requires a user to open a maliciously crafted file, putting those who handle such files at risk. Successful exploitation can lead to significant security implications, including data theft, system compromise, or unauthorized system access. Users are strongly advised to update their InDesign software to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.