High severity7.8NVD Advisory· Published May 19, 2018· Updated Jun 17, 2026

CVE-2018-4927

Description

Adobe InDesign versions 13.0 and below have an exploitable Untrusted Search Path vulnerability. Successful exploitation could lead to local privilege escalation.

Affected products

Adobe Inc./Indesign2 versions
cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*range: <=13.0
- (no CPE)range: <=13.0

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/103716nvdThird Party AdvisoryVDB Entry
helpx.adobe.com/security/products/indesign/apsb18-11.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000