CVE-2026-34702 is a stack-based buffer overflow vulnerability (CWE-121) affecting Adobe InDesign Desktop versions 21.3, 20.5.3, and earlier. Successful exploitation requires user interaction, specifically opening a malicious file, which may lead to arbitrary code execution in the context of the current user. The vulnerability has a CVSS v3.1 base score of 7.8, indicating high severity. No official patch or remediation level has been provided in the available data, and no known exploits are reported in the wild at this time.

If exploited, this vulnerability could allow an attacker to execute arbitrary code with the privileges of the user running Adobe InDesign Desktop. This could lead to full compromise of the user's environment depending on their privileges. Exploitation requires the victim to open a malicious file, so social engineering or phishing may be involved.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid opening files from untrusted or unknown sources to mitigate the risk of exploitation.