Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2026-27286

InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

Description

InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe InDesign Desktop

Default version status: unaffected

  • 0 to ≤ 21.2affected
  • 21.3unaffected
  • 0 to ≤ 20.5.2affected
  • 20.5.3unaffected

References