ZDI-CAN-29477 LOW 3.3 Upcoming Mar 30, 2026

Adobe

Adobe, a leading software company known for creative and productivity applications, has a low-severity local vulnerability (CVSS 3.3) that requires user interaction to exploit but could lead to limited information disclosure without requiring authentication or elevated privileges. The vulnerability is local-only, cannot be exploited remotely, and has no impact on system integrity or availability. Security teams should monitor for this advisory's resolution by the July 2026 vendor deadline and ensure users avoid opening untrusted files or accepting suspicious prompts from Adobe applications.

Advisory Details
Researcher Discovered by: Mark Vincent Yason (markyason.github.io)
Reported March 30, 2026
Deadline July 28, 2026 103d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy