BaseFortify

Publication date: 2025-11-11

Last updated on: 2025-11-12

Assigner: Adobe Systems Incorporated

Description

InCopy versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-11

Last Modified

2025-11-12

Generated

2026-07-06

AI Q&A

2025-11-11

EPSS Evaluated

2026-07-05

NVD

CVE-2025-61817

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	incopy	to 19.5.5 (inc)
adobe	incopy	From 20.0 (inc) to 20.5.1 (exc)
apple	macos	*
microsoft	windows	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This vulnerability is a Use After Free issue in Adobe InCopy versions 20.5, 19.5.5, and earlier. It can allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires the victim to open a malicious file, which triggers the vulnerability.

Impact Analysis

If exploited, this vulnerability could allow an attacker to run arbitrary code on your system with your user privileges, potentially leading to unauthorized actions such as data theft, system modification, or further malware installation.

Mitigation Strategies

To mitigate this vulnerability, ensure that users do not open malicious files in affected versions of InCopy (20.5, 19.5.5 and earlier). Updating InCopy to a version later than 20.5 or 19.5.5 when a patch is available is recommended. Additionally, educating users about the risk of opening untrusted files can help reduce exploitation.

Hi! I’m here to help you understand CVE-2025-61817. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70