ZDI-CAN-29588 HIGH 7.0 Upcoming Mar 13, 2026

Adobe

Adobe, a leading software company known for creative and document processing applications, has a high-severity local vulnerability (CVSS 7.0) that requires local access and low-level user privileges to exploit, but delivers significant impact across confidentiality, integrity, and availability. The attack cannot be performed remotely and does not require user interaction once the attacker gains initial local access. Security teams should monitor for patches following the July 2026 vendor deadline and assess systems where untrusted local users have account access.

Advisory Details
Researcher Brandon Evans of TrendAI Zero Day Initiative
Reported March 13, 2026
Deadline July 11, 2026 86d
CVSS Vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy