CVE-2026-34706: InCopy | Out-of-bounds Write (CWE-787)

Q: What is the severity of CVE-2026-34706?

The severity of CVE-2026-34706 is high with a score of 7.8.

Q: What is the risk associated with CVE-2026-34706?

CVE-2026-34706 has a risk rating of 68.

Q: How do I fix CVE-2026-34706?

To fix CVE-2026-34706, update Adobe InCopy to version 21.4 or later.

Q: What could happen if CVE-2026-34706 is exploited?

Exploitation of CVE-2026-34706 could lead to arbitrary code execution in the context of the current user.

Q: What versions of Adobe InCopy are affected by CVE-2026-34706?

Adobe InCopy versions 21.3, 20.5.3, and earlier are affected by CVE-2026-34706.

Published Jun 9, 2026

Updated

InCopy versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected Software

5 affected components

Adobe InCopy=21.3, <=20.5.3

All of the following

Any of the following

Adobe InCopy<20.5.4

Adobe InCopy>=21.0<21.4

Any of the following

Apple macOS

Microsoft Windows

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade InCopy to a version that resolves this vulnerability.
Fixed in 21.3
Upgrade
Upgrade InCopy to a version that resolves this vulnerability.
Fixed in 20.5.3

Event History

Jun 9, 2026

CVE Published

via MITRE·05:49 PM

Data Sourced

via MITRE·05:49 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-34706?

The severity of CVE-2026-34706 is high with a score of 7.8.

What is the risk associated with CVE-2026-34706?