CVE-2026-34707

HighCVSS 7.8

Published: 09/06/2026(UTC)Updated: 28/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

7th percentile - higher than 7% of all known CVEs

Summary

Heap-based buffer overflow vulnerability in InCopy versions 21.3, 20.5.3 and earlier. Could lead to arbitrary code execution in the context of the current user after opening a malicious file.

Risk Assessment

An attacker could take control of the victim's system if they open a crafted file.

Recommendation

Update InCopy to the latest available version.

Other vulnerabilities in InCopy

CVE-2026-34706High
InCopy versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could lead to arbitrary code execution in the context of the current user. User interaction is required (opening a malicious file).

Original NVD description (English source)

InCopy versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.