CVE-2026-21358

I

nDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

11 Feb 2026, 18:28

Type Values Removed Values Added
References () https://helpx.adobe.com/security/products/indesign/apsb26-17.html - () https://helpx.adobe.com/security/products/indesign/apsb26-17.html - Vendor Advisory
CPE cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
CWE CWE-787
First Time Microsoft windows
Adobe
Apple macos
Adobe indesign
Microsoft
Apple

10 Feb 2026, 18:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-02-10 18:16

Updated : 2026-02-11 18:28


NVD link : CVE-2026-21358

Mitre link : CVE-2026-21358

CVE.ORG link : CVE-2026-21358


JSON object : View

CWE
CWE-122

Heap-based Buffer Overflow

CWE-787

Out-of-bounds Write