ZDI-CAN-30015 HIGH 7.8 Upcoming Mar 30, 2026

Adobe

Adobe, a major software vendor known for creative and productivity applications, has a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction to exploit, but delivers significant impact through high confidentiality, integrity, and availability compromise. The vulnerability does not require authentication, making it particularly dangerous for multi-user systems where an attacker could trick a user into triggering the flaw. Security teams should monitor for Adobe patches due around late July 2026 and be prepared to prioritize this update given its high severity and ease of exploitation once a user is socially engineered.

Advisory Details
Researcher Discovered by: Mark Vincent Yason (markyason.github.io)
Reported March 30, 2026
Deadline July 28, 2026 103d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy