Adobe InCopy
65 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-34707 | ≤ 21.3 ; ≤ 20.5.3 | InCopy | Heap-based Buffer Overflow (CWE-122) | HIGH 7.8 | 0.2 % | ||
| CVE-2026-34706 | ≤ 21.3 ; ≤ 20.5.3 | InCopy | Out-of-bounds Write (CWE-787) | HIGH 7.8 | 0.1 % | ||
| CVE-2026-34708 | ≤ 21.3 ; ≤ 20.5.3 | InCopy | Stack-based Buffer Overflow (CWE-121) | HIGH 7.8 | 0.2 % | ||
| CVE-2026-34631 | ≤ 21.2 ; ≤ 20.5.2 | InCopy | Out-of-bounds Write (CWE-787) | HIGH 7.8 | 0.1 % | ||
| CVE-2026-27287 | ≤ 21.2 ; ≤ 20.5.2 | InCopy | Out-of-bounds Read (CWE-125) | HIGH 7.8 | 0.2 % | ||
| CVE-2026-21281 | ≤ 21.0 ; ≤ 19.5.5 | InCopy | Heap-based Buffer Overflow (CWE-122) | HIGH 7.8 | 0.2 % | ||
| CVE-2025-61818 | ≤ 19.5.5 | InCopy | Use After Free (CWE-416) | HIGH 7.8 | 0.2 % | ||
| CVE-2025-61816 | ≤ 19.5.5 | InCopy | Heap-based Buffer Overflow (CWE-122) | HIGH 7.8 | 0.3 % | ||
| CVE-2025-61817 | ≤ 19.5.5 | InCopy | Use After Free (CWE-416) | HIGH 7.8 | 0.2 % | ||
| CVE-2025-54217 | ≤ 19.5.4 | InCopy | Heap-based Buffer Overflow (CWE-122) | HIGH 7.8 | 0.3 % | ||
| CVE-2025-54216 | ≤ 19.5.4 | InCopy | Out-of-bounds Write (CWE-787) | HIGH 7.8 | 0.3 % | ||
| CVE-2025-54215 | ≤ 19.5.4 | InCopy | Out-of-bounds Write (CWE-787) | HIGH 7.8 | 0.3 % | ||
| CVE-2025-54223 | ≤ 19.5.4 | InCopy | Use After Free (CWE-416) | HIGH 7.8 | 0.3 % | ||
| CVE-2025-54218 | ≤ 19.5.4 | InCopy | Out-of-bounds Write (CWE-787) | HIGH 7.8 | 0.3 % | ||
| CVE-2025-54219 | ≤ 19.5.4 | InCopy | Heap-based Buffer Overflow (CWE-122) | HIGH 7.8 | 0.3 % | ||
| CVE-2025-54221 | ≤ 19.5.4 | InCopy | Out-of-bounds Write (CWE-787) | HIGH 7.8 | 0.3 % | ||
| CVE-2025-54220 | ≤ 19.5.4 | InCopy | Heap-based Buffer Overflow (CWE-122) | HIGH 7.8 | 0.3 % | ||
| CVE-2025-47098 | ≤ 19.5.3 | InCopy | Access of Uninitialized Pointer (CWE-824) | HIGH 7.8 | 0.2 % | ||
| CVE-2025-47097 | ≤ 19.5.3 | InCopy | Integer Underflow (Wrap or Wraparound) (CWE-191) | HIGH 7.8 | 0.2 % | ||
| CVE-2025-47099 | ≤ 19.5.3 | InCopy | Heap-based Buffer Overflow (CWE-122) | HIGH 7.8 | 0.3 % | ||
| CVE-2025-47107 | ≤ 19.5.3 | InCopy | Heap-based Buffer Overflow (CWE-122) | HIGH 7.8 | 0.2 % | ||
| CVE-2025-30327 | ≤ 19.5.3 | InCopy | Integer Overflow or Wraparound (CWE-190) | HIGH 7.8 | 0.2 % | ||
| CVE-2025-21156 | ≤ 19.5.1 | InCopy | Integer Underflow (Wrap or Wraparound) (CWE-191) | HIGH 7.8 | 0.3 % | ||
| CVE-2024-45136 | ≤ 18.5.3 | InCopy | Unrestricted Upload of File with Dangerous Type (CWE-434) | HIGH 7.8 | 0.3 % | ||
| CVE-2024-41858 | ≤ 19.4 | Adobe InCopy has an integer overflow vulnerability when parsing SVG file | HIGH 7.8 | 0.3 % | ||
| CVE-2023-26368 | ≤ 17.4.2 | Adobe InCopy Out-of-Bounds Read Vulnerability v1.0 | HIGH 7.8 | 0.4 % | ||
| CVE-2022-28835 | ≤ 17.1 | Adobe InCopy Font Parsing Use-After-Free Remote Code Execution Vulnerability | HIGH 7.8 | 0.5 % | ||
| CVE-2022-28834 | ≤ 17.1 | Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2022-28836 | ≤ 17.1 | Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2023-22235 | unspecified – 18.1 ; unspecified – 17.4 ; unspecified – None | Adobe InCopy SVG file Use After Free Arbitrary code execution | HIGH 7.8 | 0.4 % | ||
| CVE-2023-21599 | unspecified – 18.0 ; unspecified – 17.4 ; unspecified – None | Adobe InCopy Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-21598 | unspecified – 18.0 ; unspecified – 17.4 ; unspecified – None | Adobe InCopy Font Parsing Use-After-Free Information Disclosure Vulnerability | MEDIUM 5.5 | 0.4 % | ||
| CVE-2023-21597 | unspecified – 18.0 ; unspecified – 17.4 ; unspecified – None | Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | HIGH 7.8 | 0.3 % | ||
| CVE-2023-21596 | unspecified – 18.0 ; unspecified – 17.4 ; unspecified – None | Adobe InCopy Improper Input Validation Remote Code Execution Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2023-21595 | unspecified – 18.0 ; unspecified – 17.4 ; unspecified – None | Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | HIGH 7.8 | 0.3 % | ||
| CVE-2023-21594 | unspecified – 18.0 ; unspecified – 17.4 ; unspecified – None | Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2022-38401 | unspecified – 16.4.2 ; unspecified – 17.3 ; unspecified – None | Adobe InCopy PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | HIGH 7.8 | 0.5 % | ||
| CVE-2022-38407 | unspecified – 16.4.2 ; unspecified – 17.3 ; unspecified – None | Adobe InCopy EPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | MEDIUM 5.5 | 0.4 % | ||
| CVE-2022-38405 | unspecified – 16.4.2 ; unspecified – 17.3 ; unspecified – None | Adobe InCopy SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | HIGH 7.8 | 0.6 % | ||
| CVE-2022-38406 | unspecified – 16.4.2 ; unspecified – 17.3 ; unspecified – None | Adobe InCopy EPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | MEDIUM 5.5 | 0.4 % | ||
| CVE-2022-38404 | unspecified – 16.4.2 ; unspecified – 17.3 ; unspecified – None | Adobe InCopy SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | HIGH 7.8 | 0.6 % | ||
| CVE-2022-38402 | unspecified – 16.4.2 ; unspecified – 17.3 ; unspecified – None | Adobe InCopy SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability | HIGH 7.8 | 0.5 % | ||
| CVE-2022-38403 | unspecified – 16.4.2 ; unspecified – 17.3 ; unspecified – None | Adobe InCopy SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability | HIGH 7.8 | 0.6 % | ||
| CVE-2022-34251 | unspecified – 16.4.1 ; unspecified – 17.2 ; unspecified – None | Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | HIGH 7.8 | 0.3 % | ||
| CVE-2022-34252 | unspecified – 16.4.1 ; unspecified – 17.2 ; unspecified – None | Adobe InCopy Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | MEDIUM 5.5 | 0.3 % | ||
| CVE-2022-34249 | unspecified – 16.4.1 ; unspecified – 17.2 ; unspecified – None | Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | HIGH 7.8 | 0.5 % | ||
| CVE-2022-34250 | unspecified – 16.4.1 ; unspecified – 17.2 ; unspecified – None | Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | HIGH 7.8 | 0.5 % | ||
| CVE-2022-30657 | unspecified – 16.4.1 ; unspecified – 17.2 ; unspecified – None | Adobe InCopy Font Parsing Use-After-Free Remote Code Execution Vulnerability | HIGH 7.8 | 2.7 % | ||
| CVE-2022-30656 | unspecified – 16.4.1 ; unspecified – 17.2 ; unspecified – None | Adobe InCopy PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | HIGH 7.8 | 2.1 % | ||
| CVE-2022-30655 | unspecified – 16.4.1 ; unspecified – 17.2 ; unspecified – None | Adobe InCopy Font Parsing Use-After-Free Remote Code Execution Vulnerability | HIGH 7.8 | 2.7 % | ||
| CVE-2022-30654 | unspecified – 16.4.1 ; unspecified – 17.2 ; unspecified – None | Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | HIGH 7.8 | 6.4 % | ||
| CVE-2022-30653 | unspecified – 16.4.1 ; unspecified – 17.2 ; unspecified – None | Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | HIGH 7.8 | 2.1 % | ||
| CVE-2022-30652 | unspecified – 16.4.1 ; unspecified – 17.2 ; unspecified – None | Adobe InCopy SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | HIGH 7.8 | 2.1 % | ||
| CVE-2022-30651 | unspecified – 16.4.1 ; unspecified – 17.2 ; unspecified – None | Adobe InCopy Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability | HIGH 7.8 | 2.4 % | ||
| CVE-2022-30650 | unspecified – 16.4.1 ; unspecified – 17.2 ; unspecified – None | Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | HIGH 7.8 | 6.4 % | ||
| CVE-2021-45055 | unspecified – 16.4 ; unspecified – None | Adobe InCopy TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability | HIGH 7.8 | 2.4 % | ||
| CVE-2021-45056 | unspecified – 16.4 ; unspecified – None | Adobe InCopy JPEG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | HIGH 7.8 | 2.3 % | ||
| CVE-2021-45053 | unspecified – 16.4 ; unspecified – None | Adobe InCopy JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | HIGH 7.8 | 2.2 % | ||
| CVE-2021-45054 | unspecified – 16.4 ; unspecified – None | Adobe InCopy JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability | MEDIUM 5.5 | 2.0 % | ||
| CVE-2021-43016 | unspecified – 16.4 ; unspecified – None | Adobe InCopy NULL Pointer Dereference Application Denial of Service | MEDIUM 5.5 | 2.1 % | ||
| CVE-2021-43015 | unspecified – 16.4 ; unspecified – None | Adobe InCopy GIF File Parsing Memory Corruption Arbitrary Code Execution | HIGH 7.8 | 1.7 % | ||
| CVE-2021-39818 | unspecified – 16.3 ; unspecified – 16.3.1 ; unspecified – None | Adobe InCopy Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution | HIGH 7.8 | 1.7 % | ||
| CVE-2021-39819 | unspecified – 16.3 ; unspecified – 16.3.1 ; unspecified – None | Adobe InCopy Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution | HIGH 7.8 | 1.7 % | ||
| CVE-2021-21090 | unspecified – 16.0 ; unspecified – None | Adobe InCopy DOCX file parsing directory traversal vulnerability could lead to remote code execution | HIGH 8.8 | 5.4 % | ||
| CVE-2021-21010 | 15.1.1 and earlier | Uncontrolled search path element in Adobe InCopy | HIGH 7.0 | 2.6 % |