CVE-2022-28853: Adobe InDesign 2022 Out-of-Bound Write Arbitrary code execution
Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-28853?
CVE-2022-28853 is an out-of-bounds write vulnerability in Adobe InDesign versions 16.4.2 and earlier, and 17.3 and earlier, that could allow arbitrary code execution.
How does CVE-2022-28853 affect Adobe InDesign?
CVE-2022-28853 affects Adobe InDesign versions 16.4.2 and earlier, and 17.3 and earlier, potentially leading to arbitrary code execution when a victim opens a malicious file.
Is Adobe InDesign the only affected software by CVE-2022-28853?
Yes, Adobe InDesign versions 16.4.2 and earlier, and 17.3 and earlier, are the only affected software by CVE-2022-28853.
What is the severity of CVE-2022-28853?
The severity of CVE-2022-28853 is high with a CVSS v3 score of 7.8.
How can I get more information about CVE-2022-28853?
You can refer to the Adobe Security Bulletin APSB22-50 for more information about CVE-2022-28853.