CVE-2017-11302: Adobe Indesign

Critical severity, CVSS 9.8. EPSS: 6.5% chance of exploitation in the next 30 days.

An issue was discovered in Adobe InDesign 12.1.0 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution.

Affected products

• Adobe Indesign: up to and including 12.1.0

Published 2017-12-09. Last modified 2026-06-17.