CVE-2025-27179
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Mar 11, 2025
CWE ID 476
Summary
CVE-2025-27179 is a NULL Pointer Dereference vulnerability that affects Adobe InDesign Desktop versions ID20.1, ID19.5.2, and older. This issue allows an attacker to cause the application to crash, resulting in a denial-of-service condition. The vulnerability can be exploited by opening a malicious file, requiring user interaction. Adobe InDesign users are urged to update their software to mitigate this risk. This vulnerability could impact productivity and data access for affected organizations.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- InDesign Desktop
Affected Vendors
- Adobe