What is the CVSS score of CVE-2026-27269?

CVE-2026-27269 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Premiere Pro are affected by CVE-2026-27269?

Adobe Premiere Pro versions 25.5 and earlier contain a critical vulnerability that could allow attackers to execute malicious code on users' systems through specially crafted files.

How to fix or mitigate CVE-2026-27269?

Within 24 hours: Identify all Premiere Pro installations in your environment and document which versions are in use; communicate risk to affected teams and restrict opening untrusted project files. Within 7 days: Implement network segmentation to isolate Premiere Pro systems from sensitive networks; disable any unnecessary file-sharing features; establish a file validation process before opening external projects. Within 30 days: Monitor Adobe's patch release schedule daily; prepare deployment procedures for immediate patching upon availability; consider alternatives or virtualized environments for processing untrusted media files.

Premiere Pro CVE-2026-27269

HIGH

Out-of-bounds Read (CWE-125)

2026-03-10 psirt@adobe.com

Buffer Overflow Information Disclosure Premiere Pro

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 10, 2026 - 19:17 nvd

HIGH 7.8

DescriptionCVE.org

Premiere Pro versions 25.5 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

AnalysisAI

Code execution in Adobe Premiere Pro 25.5 and earlier via out-of-bounds read when processing malicious media files. An attacker can achieve arbitrary code execution within the user's security context by crafting a specially formatted file that triggers a memory read past allocated buffer boundaries. Exploitation requires the victim to open the malicious file, and no patch is currently available.

Technical ContextAI

Classified as CWE-125 (Out-of-bounds Read). Affects Premiere Pro. Premiere Pro versions 25.5 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.