ZDI-CAN-29433
LOW 3.3
Upcoming
Mar 30, 2026
Adobe
Adobe has disclosed a low-severity local information disclosure vulnerability (CVE details pending) that requires user interaction to exploit but no authentication. The vulnerability allows an attacker with local access to read sensitive information on an affected system through a simple attack vector. Security teams should monitor for patches arriving by late July 2026 and assess exposure in environments where untrusted users have local system access.
Advisory Details
Researcher
Discovered by:
Mark Vincent Yason (markyason.github.io)
Reported
March 30, 2026
Deadline
July 28, 2026
103d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N