CVE-2026-71399
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
Adobe XD is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation requires user interaction - the victim must open a malicious file.
Risk Assessment
Risk of an attacker gaining control of the user's workstation and executing malicious code in their context, potentially leading to data theft or further network propagation.
Recommendation
It is recommended to immediately update Adobe XD to the latest patched version. Also, avoid opening files from untrusted sources.
Other vulnerabilities in Adobe XD
See all- CVE-2019-7106Critical
Adobe XD versions 16.0 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execution.
- CVE-2019-7105Critical
Adobe XD versions 16.0 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execution.
Original NVD description (English source)
Adobe XD is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS