What is the CVSS score of CVE-2026-48269?

CVE-2026-48269 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Which versions of Premiere are affected by CVE-2026-48269?

Creative teams using Adobe Premiere Pro face immediate risk from CVE-2026-48269, which allows attackers to execute code on workstations when users open malicious project files-threatening both…

How to fix or mitigate CVE-2026-48269?

Within 24 hours: identify all Premiere Pro installations and users, enable file access logging on affected workstations, and issue an alert warning against opening project files from untrusted sources. Within 7 days: restrict project file sources to known-trusted vendors, enforce file quarantine procedures for external media, and disable auto-import features in Premiere Pro. Within 30 days: establish vendor monitoring for Adobe advisory APSB26-76 patch releases, conduct gap analysis on compensating controls, and schedule testing of the patch in non-production environments immediately upon availability.

Premiere CVE-2026-48269

EUVD-2026-44459 HIGH

Heap-based Buffer Overflow (CWE-122)

2026-07-14 adobe

GHSA-2726-9hhx-5r9m

Heap Overflow Buffer Overflow RCE Premiere

7.8

CVSS 3.1 · Vendor: adobe

Severity by source

Vendor (adobe) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from Vendor (adobe) · only source for this CVE.

CVSS VectorVendor: adobe

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 14, 2026 - 21:19 vuln.today

CVE Published

Jul 14, 2026 - 20:04 cve.org

HIGH 7.8

DescriptionCVE.org

Premiere Pro is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

AnalysisAI

Arbitrary code execution in Adobe Premiere Pro is possible via a heap-based buffer overflow (CWE-122) triggered when a victim opens a maliciously crafted project or media file, running attacker code in the context of the current user. The flaw is local and requires user interaction, with no public exploit identified at time of analysis; Adobe self-reported it in advisory APSB26-76. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Recommended ActionAI

Within 24 hours: identify all Premiere Pro installations and users, enable file access logging on affected workstations, and issue an alert warning against opening project files from untrusted sources. …

Threat intelligence, references, and detailed analysis are available after sign-in.