CVE-2024-41858
High
Published: 14 August 2024
Published
14 August 2024
Modified
15 October 2024
KEV Added
—
Patch
—
CVSS Score v3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.0027
51.0th percentile
Risk Priority
16
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2024-41858 is a high-severity Integer Overflow or Wraparound (CWE-190) vulnerability in Adobe Incopy. Its CVSS base score is 7.8 (High).
Operationally, ranked in the top 49.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-39235
Vulnerability details
InCopy versions 18.5.2, 19.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim…
more
must open a malicious file.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
adobe
incopy
≤ 18.5.2 · 19.0 — 19.4
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.