Skip to content
AdobeCVE-2026-71399

Adobe XD: buffer overflow

High7.8CVE-2026-71399 · Published Aug 25, 2026 · updated Sep 15, 2026

Adobe XD is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe advisory

Affected versions

PackageAffectedFixed in
Adobe XD
Product
<= 60No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-120

More Adobe advisories

All Adobe
Advisory
Adobe Campaign Classic: command injection
Critical10.0Aug 25
Adobe C2PA Tool: improper input validation
Medium5.5Aug 25
Adobe Substance3D - Painter: untrusted search path
High7.8Aug 25
Adobe Substance3D - Painter: heap buffer overflow
High7.8Aug 25
Adobe Substance3D - Painter: out-of-bounds write
High7.8Aug 25
Adobe C2PA Tool: integer overflow
Medium6.2Aug 25

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.