CVE-2026-34631 is an out-of-bounds write vulnerability (CWE-787) in Adobe InCopy versions 20.5.2, 21.2, and earlier. This flaw allows an attacker to execute arbitrary code in the context of the current user if the victim opens a crafted malicious file. The vulnerability requires user interaction and has a CVSS 3.1 base score of 7.8, indicating high severity. No official patch or remediation level has been published by Adobe as of the data provided.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the user's environment. However, exploitation requires that the user open a malicious file, which limits the attack vector to social engineering or targeted delivery methods. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources. Monitoring Adobe's security advisories for updates is recommended.