TROYANOSYVIRUS
Zuruck zu CVEs

CVE-2026-27286

MEDIUM
5.5

Beschreibung

InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE Details

CVSS v3.1 Bewertung5.5
SchweregradMEDIUM
CVSS VektorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
AngriffsvektorLOCAL
KomplexitatLOW
Erforderliche PrivilegienNONE
BenutzerinteraktionREQUIRED
Veroffentlicht4/14/2026
Zuletzt geandert4/16/2026
Quellenvd
Honeypot-Sichtungen0

Betroffene Produkte

adobe:indesignapple:macosmicrosoft:windows

Schwachen (CWE)

CWE-122

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.