CVE-2026-71399CWE-120

CVE-2026-71399

High · published August 25, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
25.9
In the wild
Unconfirmed
What it is

Adobe XD is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00337 · 25.9th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-08-25T22:18Z
Affected products (1)
ProductVersionsFixed in
adobe/xd< 6161
References (1)
EPSS history
Timeline
  • 27 AUG 06:43Z
    EPSS moved — → 0%
    epss
  • 25 AUG 17:52Z
    Adobe XD | Buffer Overflow (CWE-120)
    cvelistv5