# Adobe Indesign


- [CVE-2019-7107](https://insights.sbomify.com/CVE-2019-7107/): Code injection in InDesign (critical 9.8)
- [CVE-2017-11302](https://insights.sbomify.com/CVE-2017-11302/): Memory corruption in Adobe InDesign 12.1.0 and earlier versions (critical 9.8)
- [CVE-2016-7886](https://insights.sbomify.com/CVE-2016-7886/): Memory corruption in Adobe InDesign 11.4.1 and earlier, InDesign Server 11.0.0 and earlier (critical 9.8)
- [CVE-2021-36004](https://insights.sbomify.com/CVE-2021-36004/): Adobe InDesign CoolType out of bounds write vulnerability could lead to arbitrary stack manipulation (high 8.8)
- [CVE-2021-21098](https://insights.sbomify.com/CVE-2021-21098/): Adobe InDesign PCX file parsing out-of-bounds write vulnerability could lead to remote code execution (high 8.8)
- [CVE-2021-21099](https://insights.sbomify.com/CVE-2021-21099/): Adobe InDesign PCX file parsing out-of-bounds write vulnerability could lead to remote code execution (high 8.8)
- [CVE-2026-34695](https://insights.sbomify.com/CVE-2026-34695/): InDesign Desktop | Stack-based Buffer Overflow (CWE-121) (high 7.8)
- [CVE-2026-34696](https://insights.sbomify.com/CVE-2026-34696/): InDesign Desktop | Use After Free (CWE-416) (high 7.8)
- [CVE-2026-34697](https://insights.sbomify.com/CVE-2026-34697/): InDesign Desktop | Stack-based Buffer Overflow (CWE-121) (high 7.8)
- [CVE-2026-34698](https://insights.sbomify.com/CVE-2026-34698/): InDesign Desktop | Heap-based Buffer Overflow (CWE-122) (high 7.8)
- [CVE-2026-34699](https://insights.sbomify.com/CVE-2026-34699/): InDesign Desktop | Heap-based Buffer Overflow (CWE-122) (high 7.8)
- [CVE-2026-34700](https://insights.sbomify.com/CVE-2026-34700/): InDesign Desktop | Out-of-bounds Write (CWE-787) (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/products/adobe/indesign/