What is CVE-2023-44344?

CVE-2023-44344 is a medium-severity vulnerability affecting Adobe InDesign software, specifically versions ID18.5 and earlier, as well as ID17.4.2 and earlier, on both Windows and macOS systems. This vulnerability, known as an out-of-bounds read, could lead to the disclosure of sensitive memory and requires user interaction, such as opening a malicious file, for exploitation.

Who is impacted by this?

The CVE-2023-44344 vulnerability affects users of Adobe InDesign software, specifically those using versions ID18.5 and earlier, as well as ID17.4.2 and earlier, on both Windows and macOS systems.

What should I do if I’m affected?

If you're affected by the CVE-2023-44344 vulnerability, it's crucial to update your Adobe InDesign software to the latest version. Follow these simple steps:

1. Open the Creative Cloud desktop app updater.

2. Alternatively, navigate to the InDesign Help menu and click "Updates."

3. For managed environments, IT administrators can use the Creative Cloud Packager to create deployment packages. See the help page for more information.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-44344 vulnerability in Adobe InDesign is not listed in CISA's Known Exploited Vulnerabilities Catalog. It was added to the National Vulnerability Database on February 28, 2024.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-125, an out-of-bounds read issue in Adobe InDesign software.

Learn More

For a comprehensive understanding of this vulnerability, refer to the NVD page and the sources listed below.

• NVD - CVE-2023-44344

• Adobe Security Bulletin