CVE-2026-48372 is a heap-based buffer overflow vulnerability (CWE-122) affecting Adobe Format Plugins. Successful exploitation requires a victim to open a malicious file, potentially leading to arbitrary code execution within the context of the current user. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with attack vector local, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability.

If exploited, this vulnerability could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the affected system. The attack requires user interaction (opening a malicious file), limiting remote exploitation without user involvement.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should avoid opening files from untrusted sources to mitigate risk.