CVE-2026-21357

I

nDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

11 Feb 2026, 18:29

Type Values Removed Values Added
CWE CWE-787
CPE cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
First Time Microsoft windows
Adobe
Apple macos
Adobe indesign
Microsoft
Apple
References () https://helpx.adobe.com/security/products/indesign/apsb26-17.html - () https://helpx.adobe.com/security/products/indesign/apsb26-17.html - Vendor Advisory

10 Feb 2026, 18:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-02-10 18:16

Updated : 2026-02-11 18:29


NVD link : CVE-2026-21357

Mitre link : CVE-2026-21357

CVE.ORG link : CVE-2026-21357


JSON object : View

CWE
CWE-122

Heap-based Buffer Overflow

CWE-787

Out-of-bounds Write