ZDI-CAN-29178 HIGH 7.8 Upcoming Feb 24, 2026

Adobe

Adobe, a major software vendor known for creative and productivity applications, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no authentication to exploit, potentially allowing an attacker with local access to compromise confidentiality, integrity, and availability. The vulnerability was reported in February 2026 with a patching deadline of June 2026, giving the vendor a four-month window to address it. Security teams should monitor for exploitation attempts targeting local users and prioritize patching once Adobe releases fixes, particularly for widely deployed Adobe applications in their environments.

Advisory Details
Researcher Mark Vincent Yason (markyason.github.io)
Reported February 24, 2026
Deadline June 24, 2026 69d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy