Is CVE-2026-48372 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-48372 being exploited in the wild.

How severe is CVE-2026-48372?

High severity, with a CVSS score of 7.8, published 28 July 2026.

Which products and versions are affected?

Adobe Format Plugins <= 2026.05.

Is there a fix for CVE-2026-48372?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-48372 attacked?

It is attacked with local access, in a software library.

Am I affected by CVE-2026-48372?

Check whether you run Adobe Format Plugins at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-48372: Adobe Format Plugins heap overflow in file processing

Q: Is there a fix for CVE-2026-48372?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2026-48372 attacked?

It is attacked with local access, in a software library.

Q: Am I affected by CVE-2026-48372?

Check whether you run Adobe Format Plugins at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-48372 · Severity: high · CVSS 7.8 · Published 2026-07-28

Adobe Format Plugins is a component used to handle various file formats within Adobe software. A security flaw in this component allows an attacker to take control of a user's computer if the user is tricked into opening a specially crafted malicious file. This could lead to the theft of sensitive data, unauthorized software installation, or a complete system compromise.

Technologies: Adobe Format Plugins. Vendors: Adobe.

Quick answers

Is CVE-2026-48372 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-48372 being exploited in the wild.
How severe is CVE-2026-48372?: High severity, with a CVSS score of 7.8, published 28 July 2026.
Which products and versions are affected?: Adobe Format Plugins <= 2026.05.
Is there a fix for CVE-2026-48372?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-48372 attacked?: It is attacked with local access, in a software library.
Am I affected by CVE-2026-48372?: Check whether you run Adobe Format Plugins at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A heap-based buffer overflow (CWE-122) exists in Adobe Format Plugins versions 2026.05 and earlier. The vulnerability is triggered when the application fails to properly validate input while processing a malformed file, leading to memory corruption. An attacker can exploit this by convincing a user to open a malicious file, potentially achieving arbitrary code execution in the context of the current user. The issue is addressed in version 2026.07.

Affected products

Adobe Format Plugins <= 2026.05

Timeline

2026-07-28: disclosed
2026-07-28: advisory

References

https://helpx.adobe.com/security/products/formatplugins/apsb26-87.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.