CVE-2026-27287Disclosure(adobe / incopy)

LOWCVSS 7.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch adobe incopy systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

adobe CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://helpx.adobe.com/security/products/incopy/apsb26-33.html

Weakness type (CWE)

CWE-125

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

incopy
macos
windows

Threat summary

Patch or workaround signal is available
2 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Affected systems

Vendors

adobe apple microsoft

Products

incopymacoswindows

1 version affected across 3 products

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets3 URLs

By indicator

Full discourse2 posts

dbugs@ptdbugs178d
Disclosure
InCopy | Out-of-bounds Read (CWE-125) CVE: CVE-2026-27287 PT ID: PT-2026-32913 Vendor: Adobe Product: InCopy CVSS: 7.8 Credits: n/a Description: InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-27287 • https://helpx.adobe.com/security/products/incopy/apsb26-33.html #dbugs_vuln
Post summary
Adobe disclosed an out‑of‑bounds read vulnerability (CVE‑2026‑27287) affecting InCopy 20.5.2 and 21.2, with a CVSS of 7.8, and provided vendor advisory references for patching.
0000058
797 followersView on X
CVE@CVEnew178d
Disclosure
CVE-2026-27287 InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of… https://www.cve.org/CVERecord?id=CVE-2026-27287
Post summary
The text announces CVE‑2026‑27287, detailing an out‑of‑bounds read in older InCopy versions when parsing a crafted file, but provides no PoC, exploit, or patch information.
0000096
57.2K followersView on X

CPE platform detail3 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

3 of 3 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	adobe	incopy	-	-	-
OS	apple	macos	-	-	-
OS	microsoft	windows	-	-	-

Explore more

Back to dashboard adobe CVEs apple CVEs microsoft CVEs incopy vulnerabilities