ZDI-CAN-29433 LOW 3.3 Upcoming Mar 30, 2026

Adobe

Adobe has disclosed a low-severity local information disclosure vulnerability (CVE details pending) that requires user interaction to exploit but no authentication. The vulnerability allows an attacker with local access to read sensitive information on an affected system through a simple attack vector. Security teams should monitor for patches arriving by late July 2026 and assess exposure in environments where untrusted users have local system access.

Advisory Details
Researcher Discovered by: Mark Vincent Yason (markyason.github.io)
Reported March 30, 2026
Deadline July 28, 2026 103d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy