CVE-2024-39390

Summary

CVE-2024-39390 is a newly disclosed vulnerability affecting Adobe InDesign Desktop versions ID19.4 and ID18.5.2, and older releases. This out-of-bounds write issue allows an attacker to execute arbitrary code when a user opens a malicious file. The vulnerability could lead to significant security risks, as successful exploitation occurs in the context of the current user. InDesign users are strongly advised to update their software to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.