ZDI-CAN-29409 HIGH 7.8 Upcoming Mar 30, 2026

Adobe

Adobe, a major software company known for creative and productivity applications, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction to exploit but requires no authentication and can compromise confidentiality, integrity, and availability of affected systems. The vulnerability was discovered by researcher Mark Vincent Yason and has a patch deadline of July 28, 2026. Security teams should monitor Adobe's advisory releases closely and prioritize patching once available, particularly for systems where local attackers or malicious files could interact with vulnerable Adobe software.

Advisory Details
Researcher Mark Vincent Yason (markyason.github.io)
Reported March 30, 2026
Deadline July 28, 2026 103d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy