CVE-2026-48293 is an out-of-bounds write vulnerability in Adobe InDesign Desktop affecting versions 21.3, 20.5.3, and earlier. This vulnerability could enable an attacker to execute arbitrary code in the context of the current user if the user opens a crafted malicious file. The attack vector requires local user interaction (user must open the file), and the vulnerability impacts confidentiality, integrity, and availability with high severity. No official patch or remediation level has been published yet, and no known exploits are reported in the wild as of the publication date.

Successful exploitation allows arbitrary code execution with the privileges of the current user, potentially leading to full compromise of the user's environment. The vulnerability affects confidentiality, integrity, and availability of the system. However, exploitation requires user interaction, limiting the attack vector to scenarios where a user opens a malicious file.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid opening files from untrusted sources and apply general caution when handling files in affected versions. Monitor Adobe's official security advisories for updates and patches.