CVE-2026-34705
Undergoing Analysis
Undergoing Analysis - In Progress
BaseFortify
Publication date: 2026-06-09
Last updated on: 2026-06-09
Assigner: Adobe Systems Incorporated
Description
Description
InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| adobe | indesign_desktop | 21.3 |
| adobe | indesign_desktop | to 20.5.3 (exc) |
| adobe | indesign_desktop | to 21.3 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-125 | The product reads data past the end, or before the beginning, of the intended buffer. |