PatchSiren cyber security CVE debrief
CVE-2026-34708 Adobe CVE debrief
CVE-2026-34708 is a Stack-based Buffer Overflow vulnerability affecting Adobe InCopy versions 21.3, 20.5.3, and earlier. This vulnerability could result in arbitrary code execution in the context of the current user. User interaction is required for exploitation, as a victim must open a malicious file.
- Vendor
- Adobe
- Product
- InCopy
- CVSS
- HIGH 7.8
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-09
- Original CVE updated
- 2026-06-10
- Advisory published
- 2026-06-09
- Advisory updated
- 2026-06-10
Who should care
Users of Adobe InCopy versions 21.3, 20.5.3, and earlier should apply patches or updates to mitigate this vulnerability.
Technical summary
The vulnerability has a CVSS score of 7.8 and is classified as HIGH severity. The CVSS vector is CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The weakness is categorized as CWE-121.
Defensive priority
HIGH
Recommended defensive actions
- Apply patches or updates provided by Adobe to vulnerable InCopy installations.
- Ensure users do not open malicious files.
Evidence notes
CVE-2026-34708 was published on [cvePublishedAt] and modified on [cveModifiedAt]. The vulnerability affects InCopy versions 21.3, 20.5.3, and earlier.
Official resources
-
CVE-2026-34708 CVE record
CVE.org
-
CVE-2026-34708 NVD detail
NVD
-
Source item URL
nvd_modified
-
Mitigation or vendor reference
[email protected] - Vendor Advisory
CVE-2026-34708 was published on 2026-06-09T18:16:43.580Z and modified on 2026-06-10T13:00:00.560Z.