CVE-2026-27283 is a Use After Free vulnerability in Adobe InDesign Desktop (versions 20.5.2, 21.2 and earlier) that may lead to arbitrary code execution in the context of the current user. The attack vector requires local access and user interaction, as the victim must open a crafted malicious file. The vulnerability is classified under CWE-416 and has a CVSS v3.1 base score of 7.8, indicating high impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information available at this time, and no known exploits in the wild have been reported.

Successful exploitation could result in arbitrary code execution with the privileges of the current user, potentially compromising confidentiality, integrity, and availability of the affected system. The attack requires user interaction, limiting remote exploitation without user involvement. There are no known active exploits reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening files from untrusted sources to avoid triggering the vulnerability.