Improper Input Validation Vulnerability in Dreamweaver Desktop by Adobe
CVE-2026-21271

8.6HIGH

Key Information:

Vendor

Adobe
Status
Dreamweaver Desktop
Vendor
CVE Published:
13 January 2026

What is CVE-2026-21271?

Dreamweaver Desktop versions 21.6 and earlier contain an improper input validation vulnerability that could be exploited to execute arbitrary code within the context of the current user. An attacker could leverage this flaw by enticing a user to open a specially crafted malicious file, leading to a change in scope and potential unauthorized actions.

Affected Version(s)

Dreamweaver Desktop 0 <= 21.6

References

https://helpx.adobe.com/security/products/dreamweaver/aps...
vendor-advisory

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.