Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-27291 InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context o… https://www.cve.org/CVERecord?id=CVE-2026-27291
Post summary
The text announces CVE-2026-27291, highlighting an out-of-bounds write in Adobe InDesign Desktop that could lead to arbitrary code execution.
InDesign Desktop | Out-of-bounds Write (CWE-787) CVE: CVE-2026-27291 PT ID: PT-2026-32703 Vendor: Adobe Product: InDesign Desktop CVSS: 7.8 Credits: n/a Description: InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-27291 • https://helpx.adobe.com/security/products/indesign/apsb26-32.html #dbugs_vuln
Post summary
Adobe disclosed CVE-2026-27291 as an out-of-bounds write in InDesign Desktop, with an available patch and CVSS score of 7.8.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | adobe | indesign | - | - | - |