PT-2026-2777
CVE-2026-21281
·
Published
2026-01-13
·
Updated
2026-08-28
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
InCopy versions 21.0 and 19.5.5 and earlier
Description
InCopy versions 21.0, 19.5.5, and earlier are susceptible to a Heap-based Buffer Overflow that may lead to arbitrary code execution with the privileges of the current user. Successful exploitation requires a user to open a specially crafted malicious file.
Recommendations
Update InCopy to a version later than 19.5.5.
Update InCopy to a version later than 21.0.
Found an issue in the description? Have something to add? Feel free to write us 👾