CVE-2026-21276: InDesign Desktop | Access of Uninitialized Pointer (CWE-824)
InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2026-21276?
CVE-2026-21276 has a high severity rating due to its potential for arbitrary code execution.
How do I fix CVE-2026-21276?
To fix CVE-2026-21276, update Adobe InDesign Desktop to version 21.0 or later.
What versions of InDesign Desktop are affected by CVE-2026-21276?
CVE-2026-21276 affects Adobe InDesign Desktop versions 21.0, 19.5.5, and earlier.
What types of systems are vulnerable to CVE-2026-21276?
Any system running the affected versions of Adobe InDesign Desktop is vulnerable to CVE-2026-21276.
Can CVE-2026-21276 be exploited remotely?
CVE-2026-21276 requires user interaction for exploitation, making it not a remote vulnerability.