CVE-2026-21353

7.8 highEPSS 0.2%

High (7.8) in adobe dng software development kit. EPSS 0.2% chance of exploitation in the next 30 days.

DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
CWE: CWE-190
Published: 2026-02-10
Modified: 2026-08-28
Record from: the NVD, synced 2026-10-19

Affected

adobe:dng_software_development_kit

References

https://helpx.adobe.com/security/products/dng-sdk/apsb26-23.html

Check your stack JSON