InCopy versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Adobe |
|
| Apple |
|
| Microsoft |
|
Configuration 1 [-]
| AND |
|
No data.
References
History
Wed, 12 Nov 2025 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Apple
Apple macos Microsoft Microsoft windows |
|
| CPEs | cpe:2.3:a:adobe:incopy:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
|
| Vendors & Products |
Apple
Apple macos Microsoft Microsoft windows |
Wed, 12 Nov 2025 13:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Adobe
Adobe incopy |
|
| Vendors & Products |
Adobe
Adobe incopy |
Tue, 11 Nov 2025 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | InCopy versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |
| Title | InCopy | Use After Free (CWE-416) | |
| Weaknesses | CWE-416 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: adobe
Published: 2025-11-11T17:06:13.261Z
Updated: 2025-11-12T04:57:56.376Z
Reserved: 2025-10-01T17:52:06.978Z
Link: CVE-2025-61818
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2025-11-11T17:15:52.617
Modified: 2025-11-12T18:23:46.357
Link: CVE-2025-61818
Redhat
No data.