CVE-2026-34697 is a stack-based buffer overflow vulnerability (CWE-121) affecting Adobe InDesign Desktop versions 21.3, 20.5.3, and earlier. Successful exploitation requires user interaction, specifically opening a crafted malicious file, which could allow an attacker to execute arbitrary code in the context of the current user. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with high impact on confidentiality, integrity, and availability. No official patch or remediation level has been disclosed at this time.

If exploited, this vulnerability could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the affected system. The attack requires user interaction (opening a malicious file), which limits remote exploitation without user involvement. The impact includes potential loss of confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid opening files from untrusted sources and apply standard security best practices to limit exposure.