ZDI-CAN-29896 HIGH 7.8 Upcoming Mar 30, 2026

Adobe

Adobe, a major software company known for creative and productivity applications, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction to exploit but grants an unauthenticated attacker full system compromise through confidentiality, integrity, and availability impacts. The flaw is locally exploitable with minimal complexity, meaning an attacker with physical or local access can trigger it through user action to gain complete control over affected systems. Security teams should monitor for exploitation attempts targeting Adobe products and prepare patches ahead of the July 2026 vendor deadline, as this vulnerability could be leveraged in targeted attacks or supply chain compromises.

Advisory Details
Researcher Anonymous
Reported March 30, 2026
Deadline July 28, 2026 103d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy