VulnSocial

CVE-2026-34707Disclosure(adobe / incopy)

LOWCVSS 7.8 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch adobe incopy systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

InCopy versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

adobe CVEsBack to dashboard
2.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-122

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • incopy
  • macos
  • windows

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
adobeapplemicrosoft
Products
incopymacoswindows

1 version affected across 3 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-10: 1PoC Mentioned / Linked · 2026-06-10: 1Patch / Workaround · 2026-06-10: 1Technical Details · 2026-06-10: 106-10
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Disclosure

    CVE-2026-34707 - Heap buffer overflow in Incopy could lead to RCE. CVSS 7.8. Unpatched. Do not open untrusted files. #CVE #infosec #Adobe #CVEAlert A #Cyebersecurity Heaven has all information you need for FREE and what a real expert needs: https://www.valtersit.com/cve/CVE-2026-34707

    Post summary

    The post announces CVE-2026-34707, a heap buffer overflow in Adobe InCopy that can lead to remote code execution, is currently unpatched, and recommends avoiding untrusted files.

    0000035
    920 followersView on X
CPE platform detail3 entries

3 of 3 entries

PartVendorProductVersionTarget SWTarget HW
Appadobeincopy---
OSapplemacos---
OSmicrosoftwindows---

Explore more

Back to dashboardadobe CVEsapple CVEsmicrosoft CVEsincopy vulnerabilities