CVE-2026-21304

I

nDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

14 Jan 2026, 19:29

Type Values Removed Values Added
References () https://helpx.adobe.com/security/products/indesign/apsb26-02.html - () https://helpx.adobe.com/security/products/indesign/apsb26-02.html - Vendor Advisory
CWE CWE-787
CPE cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
First Time Adobe indesign
Apple macos
Microsoft windows
Apple
Microsoft
Adobe

13 Jan 2026, 19:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-01-13 19:16

Updated : 2026-01-14 19:29


NVD link : CVE-2026-21304

Mitre link : CVE-2026-21304

CVE.ORG link : CVE-2026-21304


JSON object : View

CWE
CWE-122

Heap-based Buffer Overflow

CWE-787

Out-of-bounds Write