PatchSiren cyber security CVE debrief
CVE-2026-34702 Adobe CVE debrief
CVE-2026-34702 is a Stack-based Buffer Overflow vulnerability affecting Adobe InDesign versions 21.3, 20.5.3, and earlier. This vulnerability could result in arbitrary code execution in the context of the current user, requiring user interaction to open a malicious file. The CVSS score for this vulnerability is 7.8, classified as HIGH.
- Vendor
- Adobe
- Product
- InDesign Desktop
- CVSS
- HIGH 7.8
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-09
- Original CVE updated
- 2026-06-10
- Advisory published
- 2026-06-09
- Advisory updated
- 2026-06-10
Who should care
Users of Adobe InDesign versions 21.3, 20.5.3, and earlier should apply patches to mitigate this vulnerability.
Technical summary
The vulnerability is caused by a Stack-based Buffer Overflow, which can be exploited when a victim opens a malicious file. This issue has been addressed in later versions of Adobe InDesign.
Defensive priority
HIGH
Recommended defensive actions
- Apply patches from Adobe as described in their security bulletin [ref-4].
Evidence notes
CVE-2026-34702 was published on [cvePublishedAt] and modified on [cveModifiedAt].
Official resources
-
CVE-2026-34702 CVE record
CVE.org
-
CVE-2026-34702 NVD detail
NVD
-
Source item URL
nvd_modified
-
Mitigation or vendor reference
[email protected] - Vendor Advisory
CVE-2026-34702 was published on 2026-06-09T18:16:42.087Z and modified on 2026-06-10T13:01:19.290Z.