Adobe Audition CVE-2026-47968

Exploitation requires the victim to open a malicious file in Adobe Audition (UI:R) and requires local delivery of that file to the target host (AV:L); no authentication or elevated privileges are needed by the attacker (PR:N). The limiting factors are significant: the attack is not remotely triggerable without user action, it depends entirely on social-engineering the victim into opening an attacker-controlled Audition-parseable file, and it executes only with the current user's privileges (S:U, no privilege escalation). It affects hosts with a vulnerable Audition version installed; users who never open untrusted files are effectively not exposed.

The CVSS 3.1 base score is 7.8 (High) with vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - local attack vector, low complexity, no privileges required, but mandatory user interaction, with high impact to confidentiality, integrity, and availability. The AV:L combined with UI:R accurately reflects a client-side file-open exploit rather than network-reachable RCE, so despite the 'High' rating the practical attack surface depends on social engineering to deliver and open a malicious file. No EPSS score was provided, so exploitation probability cannot be quantified from this data; the vulnerability is NOT in CISA KEV and no POC is referenced, so there is no public exploit identified at time of analysis. Net assessment: a genuine code-execution bug worthy of prompt patching for workstations running Audition, but not an emergency internet-facing exposure - priority should track exposure of users who routinely open untrusted audio/project files. No SSVC decision data was supplied, so automatability and exploitation-maturity signals are unknown.

An attacker crafts a malicious Adobe Audition project or audio file that triggers the out-of-bounds write and delivers it via email, a shared drive, or a download masquerading as a legitimate audio asset. When the victim opens the file in a vulnerable Audition build, the corrupted memory hijacks execution and runs the attacker's code with the victim's user privileges. No public exploit is identified at time of analysis, and the low attack complexity (AC:L) means a working exploit would be reliable once developed, though delivery still depends on convincing the victim to open the file.