CVE-2025-21126: InDesign Desktop | Improper Input Validation (CWE-20)
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service condition. An attacker could exploit this vulnerability to cause the application to crash, resulting in a denial of service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21126?
CVE-2025-21126 is classified as a denial-of-service vulnerability that can lead to application crashes.
How do I fix CVE-2025-21126?
To fix CVE-2025-21126, ensure you upgrade Adobe InDesign Desktop to the latest version beyond 20.0.
Which versions of Adobe InDesign are affected by CVE-2025-21126?
Adobe InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by CVE-2025-21126.
What is the impact of CVE-2025-21126?
The impact of CVE-2025-21126 is an application denial-of-service condition that can be exploited to crash the application.
Can CVE-2025-21126 be exploited remotely?
Yes, CVE-2025-21126 could potentially be exploited remotely by an attacker to cause an application crash.