Description
Adobe InDesign versions 14.0.1 and below have an unsafe hyperlink processing vulnerability. Successful exploitation could lead to arbitrary code execution. Fixed in versions 13.1.1 and 14.0.2.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HAffected software
| Vendor | Product | Versions |
|---|---|---|
| Adobe | InDesign | 14.0.1 and below |
References
- http://www.securityfocus.com/bid/107821Broken Link, Third Party Advisory, VDB Entry
- https://helpx.adobe.com/security/products/indesign/apsb19-23.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/107821Broken Link, Third Party Advisory, VDB Entry
- https://helpx.adobe.com/security/products/indesign/apsb19-23.htmlPatch, Vendor Advisory
Timeline
- Published
- May 23, 2019
- Last modified
- Jun 17, 2026
- NVD status
- Modified