CVE-2023-22235: Adobe Incopy

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

InCopy versions 18.1 (and earlier), 17.4 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

• Adobe Incopy: before 17.4.1 (fixed in 17.4.1); from 18.0, before 18.2 (fixed in 18.2)

Published 2023-04-12. Last modified 2026-06-17.