CVE-2024-41866

InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS). An attacker could exploit this vulnerability to crash the application, resulting in a denial of service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

• CWE-476

• https://helpx.adobe.com/security/products/indesign/apsb24-56.htmlVendor Advisory

Published

Aug 14, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-41860Substance3D - Sampler versions 4.5 and earlier are affected …5.5
• CVE-2024-41861Substance3D - Sampler versions 4.5 and earlier are affected …5.5
• CVE-2024-41862Substance3D - Sampler versions 4.5 and earlier are affected …5.5
• CVE-2024-41863Substance3D - Sampler versions 4.5 and earlier are affected …5.5
• CVE-2024-41864Substance3D - Designer versions 13.1.2 and earlier are affec…7.8
• CVE-2024-41865Dimension versions 3.4.11 and earlier are affected by an Unt…7.8
• CVE-2024-41867After Effects versions 23.6.6, 24.5 and earlier are affected…5.5
• CVE-2024-41868Audition versions 24.4.1, 23.6.6 and earlier are affected by…5.5
• CVE-2024-41869Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.3…7.8
• CVE-2024-4187Stored XSS vulnerability has been discovered in OpenText™ Fi…5.4
• CVE-2024-41870Media Encoder versions 24.5, 23.6.8 and earlier are affected…5.5
• CVE-2024-41871Media Encoder versions 24.5, 23.6.8 and earlier are affected…5.5