PT-2026-2777

CVE-2026-21281

·

Published

2026-01-13

·

Updated

2026-08-28

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions InCopy versions 21.0 and 19.5.5 and earlier
Description InCopy versions 21.0, 19.5.5, and earlier are susceptible to a Heap-based Buffer Overflow that may lead to arbitrary code execution with the privileges of the current user. Successful exploitation requires a user to open a specially crafted malicious file.
Recommendations Update InCopy to a version later than 19.5.5. Update InCopy to a version later than 21.0.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾