CVE-2026-27291

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 20.5.2 and 21.2 and earlier

Description An out-of-bounds write occurs when a program writes data past the end of the intended buffer. This issue could result in arbitrary code execution in the context of the current user and requires user interaction, specifically the opening of a malicious file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.