Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2985 articles · 161887 vulns · 36/41 feeds (7d)
← Back to list
7.8
CVE-2026-34698EXPLOITEDPATCHED
adobe · indesign desktop

InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

Description

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected Products

VendorProductVersions
adobeindesign desktop0

References

  • https://helpx.adobe.com/security/products/indesign/apsb26-58.html(vendor-advisory)

Related News (1 articles)

Tier C
VulDB3h ago
CVE-2026-34698 | Adobe InDesign Desktop up to 20.5.3/21.3 File heap-based overflow (apsb26-58)
→ No new info (linked only)
CVSS 3.17.8 HIGH
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
https://helpx.adobe.com/security/products/indesign/apsb26-58.html
CWECWE-122
PublishedJun 9, 2026
Last enriched3h agov2
Trending Score51
Source articles1
Independent1
Info Completeness9/14
Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-34700EXP
InDesign Desktop | Out-of-bounds Write (CWE-787)
Trending: 51
HIGHCVE-2026-34697EXP
InDesign Desktop | Stack-based Buffer Overflow (CWE-121)
Trending: 51
HIGHCVE-2026-34699EXP
InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
Trending: 51
HIGHCVE-2026-48293EXP
InDesign Desktop | Out-of-bounds Write (CWE-787)
Trending: 51
CRITICALCVE-2026-34707EXP
InCopy | Heap-based Buffer Overflow (CWE-122)
Trending: 49

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Jun 9, 2026
Discovered by ZDM
Jun 9, 2026
Updated: description, severity, activelyExploited
Jun 9, 2026
Actively Exploited
Jun 9, 2026
Patch Available
Jun 9, 2026

Version History

v2
Last enriched 3h ago
v2Tier C3h ago

Updated severity to CRITICAL, changed exploit availability to false, and marked as actively exploited.

descriptionseverityactivelyExploited
via VulDB
v14h ago

Initial creation