CVE-2026-21358EPSS p5.0%
CVE-2026-21358CVE-2026-21358
adobe / indesign
Description
InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Scoring
| CVSS | 5.5 () |
| Vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
| EPSS | 0.16% probability of exploitation · percentile 5.0% · 2026-10-05T12:00:23Z |
| Last modified | 2026-08-28 |