CVE-2026-47906 describes a vulnerability in Adobe Dreamweaver Desktop (versions 21.7 and earlier) caused by reliance on a vulnerable third-party component (CWE-1395). This dependency can lead to arbitrary code execution within the context of the current user. Successful exploitation requires that the user opens a malicious file, which changes the security scope. The CVSS v3.1 base score is 8.6, reflecting high impact on confidentiality, integrity, and availability. No official patch or remediation level has been published yet, and no known exploits are reported in the wild.

If exploited, an attacker could execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the user's environment within Dreamweaver Desktop. The vulnerability affects confidentiality, integrity, and availability of the affected system. Exploitation requires user interaction (opening a malicious file), which limits the attack vector to social engineering or targeted delivery.

Patch status is not yet confirmed — check the Adobe vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening files from untrusted sources. No official remediation or temporary fix has been published by Adobe at this time.