CVE-2026-34629Disclosure(adobe / indesign)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-122

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • indesign

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-04-15); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
Products
indesign

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-15: 2Mentions · 2026-04-21: 1Technical Details · 2026-04-15: 204-1504-21
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-04-152
Disclosure2
2026-04-211
General1
Full discourse3 posts
  • IntegSec@integ_sec
    General

    CVE-2026-34629: Adobe InDesign Heap Buffer Overflow - What It Means for Your Business and How to Respond https://hubs.li/Q04cTJC40

    Post summary

    The brief headline appears to be an informational article about the CVE, with no concrete details on exploitation, patches, or technical depth provided in the excerpt.

    0000013
    29 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-34629 InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the con… https://www.cve.org/CVERecord?id=CVE-2026-34629

    Post summary

    The text announces a heap-based buffer overflow in Adobe InDesign Desktop versions 20.5.2, 21.2 and earlier that may allow arbitrary code execution.

    0000070
    57.2K followersView on X
  • dbugs@ptdbugs
    Disclosure

    InDesign Desktop | Heap-based Buffer Overflow (CWE-122) CVE: CVE-2026-34629 PT ID: PT-2026-32893 Vendor: Adobe Product: InDesign Desktop CVSS: 7.8 Credits: n/a Description: InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-34629 • https://helpx.adobe.com/security/products/indesign/apsb26-32.html #dbugs_vuln

    Post summary

    The passage discloses a heap-based buffer overflow vulnerability (CVE-2026-34629) in Adobe InDesign Desktop, detailing affected versions, CVSS score, and the requirement for user interaction to exploit, but does not provide PoC, exploit code, patch information, or status of active exploitation.

    0000044
    797 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appadobeindesign---

Explore more