Input Validation Flaw in Dimension by Adobe May Lead to Code Execution
CVE-2026-103846

8.6HIGH

Key Information:

Vendor

Adobe

Vendor
CVE Published:
13 October 2026

What is CVE-2026-103846?

Adobe Dimension is exposed to a serious flaw involving inadequate validation of user input during the generation of web pages. This vulnerability could allow a local attacker with user permissions to execute arbitrary code within the context of the current user. Successful exploitation requires user interaction, as the targeted individual must actively run the application. The implications of this vulnerability highlight the importance of strict input validation to safeguard against potential code execution.

Affected Version(s)

Adobe Dimension 0 <= 4.1.8

Adobe Dimension 4.1.9

References

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.