What is the CVSS score of CVE-2026-34705?

CVE-2026-34705 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Adobe InDesign Desktop CVE-2026-34705

EUVD-2026-35776 MEDIUM

Out-of-bounds Read (CWE-125)

2026-06-09 adobe

GHSA-5765-2635-hxv6

Buffer Overflow Information Disclosure Adobe Indesign Desktop

5.5

CVSS 3.1 · Vendor: adobe

Severity by source

Vendor (adobe) PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Primary rating from Vendor (adobe) · only source for this CVE.

CVSS VectorVendor: adobe

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jun 09, 2026 - 19:59 vuln.today

DescriptionCVE.org

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

AnalysisAI

Out-of-bounds read in Adobe InDesign Desktop versions 21.3 and 20.5.3 (and earlier) exposes sensitive process memory when a victim opens a specially crafted document file. The vulnerability carries a high confidentiality impact (CVSS C:H) with no integrity or availability impact, making it a targeted information-disclosure primitive - useful for memory leak-assisted exploitation chains or direct leakage of in-memory content such as document data, credentials, or heap pointers. No public exploit code has been identified and this CVE does not appear in CISA KEV at time of analysis, but its social-engineering-friendly delivery mechanism (malicious file open) makes it a realistic phishing vector against creative industry targets who routinely handle external InDesign files.

Technical ContextAI

Adobe InDesign Desktop is a professional desktop publishing application. The vulnerability is classified as CWE-125 (Out-of-Bounds Read), a memory safety flaw occurring when code reads data beyond the allocated buffer boundary during file parsing. This class of vulnerability typically arises in format parsers that fail to validate field lengths or object counts embedded in file headers before dereferencing memory offsets. The CPE string cpe:2.3:a:adobe:indesign_desktop:*:*:*:*:*:*:*:* covers all platform variants of the desktop application. Tags additionally include 'Buffer Overflow', suggesting the underlying parser code may share characteristics with write-side overflow conditions, though the confirmed impact is a read. The CVSS local attack vector (AV:L) reflects that exploitation is triggered by local file execution - the attacker does not interact directly with a network service but instead relies on the victim's file handler invoking the vulnerable parser.

RemediationAI

The primary remediation is to upgrade Adobe InDesign Desktop to a version beyond the affected branches per the vendor advisory APSB26-58 at https://helpx.adobe.com/security/products/indesign/apsb26-58.html. The exact fixed version numbers are not directly enumerated in the available input data and should be confirmed from the advisory before patching. Patch status is confirmed available per vendor advisory (Adobe-reported, APSB26-58 published). As a compensating control where immediate patching is not possible, organizations should restrict opening of InDesign files received from untrusted external sources, configure mail gateway policies to sandbox or quarantine .indd/.idml file attachments, and advise users not to open unsolicited InDesign files. Note that disabling InDesign entirely eliminates the attack surface but is operationally disruptive for creative workflows. User awareness training on file-based phishing targeting creative professionals is a low-cost supplementary control.