CVE-2026-21271
Improper Input Validation in Adobe Dreamweaver Enables Code Execution
Publication date: 2026-01-13
Last updated on: 2026-01-13
Assigner: Adobe Systems Incorporated
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| adobe | dreamweaver | to 21.6 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-20 | The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an Improper Input Validation issue in Dreamweaver Desktop versions 21.6 and earlier. It allows an attacker to execute arbitrary code with the privileges of the current user if the user opens a malicious file. Exploitation requires user interaction and changes the scope of execution.
How can this vulnerability impact me? :
If exploited, this vulnerability can lead to arbitrary code execution in the context of the current user, potentially allowing attackers to compromise the affected system, access sensitive data, or perform unauthorized actions with the user's privileges.