CVE-2026-71399: Buffer Overflow (CWE-120) in Adobe Adobe XD

CVE-2026-71399 is a buffer overflow vulnerability (CWE-120) in Adobe XD that could lead to arbitrary code execution in the context of the current user. The attack vector requires local access and user interaction, as a victim must open a crafted malicious file to trigger the vulnerability. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild, and no vendor-provided patch or mitigation details have been disclosed at this time.

Successful exploitation could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the user's environment. The vulnerability affects confidentiality, integrity, and availability. However, exploitation requires user interaction, limiting remote exploitation scenarios.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening files from untrusted sources. No official mitigation or workaround has been provided by the vendor at this time.