CVE-2018-4927

Description

Adobe InDesign versions 13.0 and below have an exploitable Untrusted Search Path vulnerability. Successful exploitation could lead to local privilege escalation.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

1.724

Associated Vulnerability

Vulnerability	OS Platform
Update Adobe InDesign CC to version 13.1	Windows
Update Adobe InDesign CC (x64) to version 13.1	Windows
Multiple Vulnerabilities are affected in Adobe InDesign 13.0	Windows
Vulnerabilities CVE-2018-4927,CVE-2018-4928 are fixed in Adobe InDesign for Mac 13.1	Mac

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234