CVE-2022-28852: Adobe InDesign 2022 Out-of-Bound Write Arbitrary code execution
Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Adobe InDesign vulnerability?
The vulnerability ID for this Adobe InDesign vulnerability is CVE-2022-28852.
What is the severity level of CVE-2022-28852?
The severity level of CVE-2022-28852 is high (7.8).
Which versions of Adobe InDesign are affected?
Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected.
What is the impact of the vulnerability?
The vulnerability could result in arbitrary code execution in the context of the current user.
Is user interaction required to exploit this vulnerability?
Yes, exploitation of this issue requires user interaction in that a victim must open a malicious file.
How can I fix CVE-2022-28852?
To fix CVE-2022-28852, update Adobe InDesign to the latest version available.