ZDI-CAN-29828
HIGH 7.8
Upcoming
Mar 30, 2026
Adobe
Adobe has disclosed a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction to exploit, but delivers significant impact across confidentiality, integrity, and authenticity when successfully leveraged. The flaw poses particular risk to users who may unknowingly execute malicious files or content on their systems where Adobe products are installed. Security teams should monitor for exploitation patterns targeting Adobe applications and prepare patches ahead of the July 2026 vendor deadline.
Advisory Details
Researcher
Seiji Sakurai (@HeapSmasher)
Reported
March 30, 2026
Deadline
July 28, 2026
103d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H