High (7.8) in adobe indesign. EPSS 4.3% chance of exploitation in the next 30 days.
Adobe InDesign versions 13.0 and below have an exploitable Memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
Severity
CVSS 3.0
7.8 high
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
4.3% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)