Adobe XD 60.0 < 61 Arbitrary code execution (APSB26-125) (macOS)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(341722);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/08/31");

  script_cve_id("CVE-2026-71399");

  script_name(english:"Adobe XD 60.0 < 61 Arbitrary code execution (APSB26-125) (macOS)");

  script_set_attribute(attribute:"synopsis", value:
"The Adobe XD instance installed on the remote host is affected by an arbitrary code execution vulnerability.");
  script_set_attribute(attribute:"description", value:
"The version of Adobe XD installed on the remote macOS host is prior to 61. It is, therefore, affected by a vulnerability
as referenced in the APSB26-125 advisory.

  - Adobe XD is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in
    the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code.
    Exploitation of this issue requires user interaction in that a victim must open a malicious file.
    (CVE-2026-71399)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://helpx.adobe.com/security/products/xd/apsb26-125.html");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Adobe XD version 61 or later.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-71399");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(120);

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/08/25");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/08/25");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/08/31");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:adobe:xd");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"MacOS X Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("macosx_adobe_xd_installed.nbin");
  script_require_keys("installed_sw/Adobe XD", "Host/MacOSX/Version", "Host/local_checks_enabled");

  exit(0);
}


include('vdf.inc');

# @tvdl-content
var vuln_data = {
  "metadata": {
    "spec_version": "1.0"
  },
  "requires": [
    {
      "scope": "target",
      "match": {
        "os": "macos"
      }
    }
  ],
  "checks": [
    {
      "product": {
        "name": "Adobe XD",
        "type": "app"
      },
      "check_algorithm": "default",
      "constraints": [
        {
          "min_version": "60.0",
          "fixed_version": "61"
        }
      ]
    }
  ]
};

var vdf_result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_HOLE);
vdf::handle_check_and_report_errors(vdf_result:vdf_result);