CVE-2026-34631: InCopy | Out-of-bounds Write (CWE-787)

Q: What is the severity of CVE-2026-34631?

CVE-2026-34631 is rated as a critical vulnerability that allows for arbitrary code execution.

Q: How do I fix CVE-2026-34631?

To fix CVE-2026-34631, update Adobe InCopy to the latest version beyond 21.2.

Q: Who is affected by CVE-2026-34631?

CVE-2026-34631 affects Adobe InCopy versions 20.5.2 and earlier up to 21.2.

Q: What type of vulnerability is CVE-2026-34631?

CVE-2026-34631 is classified as an out-of-bounds write vulnerability.

Q: What are the potential risks of CVE-2026-34631?

The potential risks of CVE-2026-34631 include arbitrary code execution that could compromise the affected system.

Published Apr 14, 2026

Updated

InCopy versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected Software

5 affected components

Adobe InCopy=20.5.2, <=21.2

All of the following

Any of the following

Adobe InCopy<20.5.3

Adobe InCopy>=21.0<21.3

Any of the following

Apple macOS

Microsoft Windows

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade InCopy to a version that resolves this vulnerability.
Fixed in 20.5.2
Upgrade
Upgrade InCopy to a version that resolves this vulnerability.
Fixed in 21.2

Event History

Apr 14, 2026

CVE Published

via MITRE·09:14 PM

Data Sourced

via MITRE·09:14 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-34631?

CVE-2026-34631 is rated as a critical vulnerability that allows for arbitrary code execution.

How do I fix CVE-2026-34631?