ZDI-CAN-29867 HIGH 7.8 Upcoming Mar 25, 2026

Adobe

Adobe, a leading software company known for creative and productivity applications, has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires user authentication and local system access but causes significant damage once exploited, including confidentiality, integrity, and availability breaches. The vulnerability was reported in March 2026 with a vendor patch deadline of July 2026, giving security teams a limited window before public disclosure. Security teams should monitor for exploitation attempts targeting authenticated local users and prepare patch deployment procedures for affected Adobe products before the July deadline.

Advisory Details
Researcher Brandon Evans of TrendAI Zero Day Initiative
Reported March 25, 2026
Deadline July 23, 2026 98d
CVSS Vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy