Product:
Dreamweaver Desktop
Summary
Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An attacker could leverage this vulnerability to manipulate or inject malicious data into files on the system. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.6 | CVE-2026-21272 |
Exploitation
To exploit this vulnerability, an attacker must create a malicious file that, when opened by the victim using Dreamweaver, triggers the improper input validation. This allows the attacker to manipulate or inject harmful data into the file system, potentially leading to unauthorized access or data corruption.
Affected Products
- Dreamweaver Desktop versions 21.6 and earlier: Vulnerable to improper input validation allowing arbitrary file system write.
Mitigation
To mitigate this vulnerability, users should avoid opening untrusted files in Dreamweaver and ensure they are using the latest version of the software. Regular updates and security patches from Adobe should be applied promptly to protect against known vulnerabilities.