Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-15 | 2 | Disclosure2 |
| 2026-04-25 | 1 | General1 |
CVE-2026-34627: Adobe InDesign Heap-Based Buffer Overflow - What It Means for Your Business and How to Respond https://hubs.li/Q04dsqBM0
Post summary
The statement identifies CVE-2026-34627 as a heap-based buffer overflow in Adobe InDesign but does not provide PoC, exploit, patch, or evidence of active exploitation.
CVE-2026-34627 InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the con… https://www.cve.org/CVERecord?id=CVE-2026-34627
Post summary
Adobe InDesign Desktop versions 20.5.2, 21.2 and earlier are vulnerable to a heap‑based buffer overflow that could allow arbitrary code execution; no PoC, exploit, patch, or evidence of active exploitation is provided.
InDesign Desktop | Heap-based Buffer Overflow (CWE-122) CVE: CVE-2026-34627 PT ID: PT-2026-32891 Vendor: Adobe Product: InDesign Desktop CVSS: 7.8 Credits: n/a Description: InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-34627 • https://helpx.adobe.com/security/products/indesign/apsb26-32.html #dbugs_vuln
Post summary
The passage discloses technical details of a heap‑based buffer overflow vulnerability in Adobe InDesign Desktop (CVE‑2026‑34627), specifying affected versions, impact, and CVSS score, but does not mention a PoC, exploit, active use, or patch.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | adobe | indesign | - | - | - |