EUVD-2026-44456
GHSA-7h48-w37q-xrm6
Severity by source
AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Local-only attack (AV:L), high complexity per AC:H due to uncontrolled conditions, no privileges needed within the app (PR:N), scope change to protected writes (S:C/I:H), no confidentiality or availability impact.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
Lifecycle Timeline
1DescriptionCVE.org
Premiere Pro is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.
AnalysisAI
Security feature bypass in Adobe Premiere Pro allows a local attacker to gain unauthorized write access by exploiting improper input validation (CWE-20). Both the 25.x and 26.x release branches are affected - versions up to and including 25.6.5 and 26.2.2 respectively - with scope change noted in the CVSS vector, indicating the write-access impact extends beyond Premiere Pro's own security boundary. No public exploit has been identified at time of analysis, EPSS is extremely low at 0.16% (5th percentile), and SSVC classifies exploitation as none with partial technical impact, suggesting this is a theoretical-to-low real-world risk despite the integrity-focused impact.
Technical ContextAI
Adobe Premiere Pro (CPE: cpe:2.3:a:adobe:premiere:*:*:*:*:*:*:*:*) is a professional non-linear video editing application. The root cause is CWE-20 (Improper Input Validation) - the application fails to sufficiently validate input used in a security-relevant decision or access control gate, allowing an attacker to supply crafted input that causes a security feature to be bypassed. The CVSS scope-changed (S:C) designation indicates the flaw allows an impact that crosses a privilege or security boundary, meaning the attacker's unauthorized write access likely reaches resources or components outside Premiere Pro's own trust domain (e.g., OS-level paths, shared media libraries, or protected application directories). The tag 'Authentication Bypass' and the description's 'security feature bypass' together suggest that a normally enforced access check - such as a file-write guard or integrity protection - can be circumvented via malformed input.
RemediationAI
Adobe has released patched versions for both affected branches: upgrade to Premiere Pro 26.3 (for 26.x users) or Premiere Pro 25.6.6 (for 25.x users), as documented in the vendor advisory at https://helpx.adobe.com/security/products/premiere_pro/apsb26-76.html. Organizations should prioritize patching workstations used by editors and post-production staff. In environments where immediate patching is not possible, compensating controls include restricting local user privileges on Premiere Pro workstations to reduce the attack surface for local privilege-escalation chains, and monitoring file-system write activity in directories outside expected Premiere Pro working paths using endpoint detection tooling. These compensating controls do not eliminate the vulnerability but reduce the likelihood that an attacker with local access can chain the bypass to a meaningful impact. Note that the S:C nature of the flaw means the write access may target OS or application directories - any anomalous write telemetry in protected paths should be treated as suspicious on unpatched systems.
Arbitrary code execution in Adobe Premiere Pro is possible via a heap-based buffer overflow (CWE-122) triggered when a v
Arbitrary code execution in Adobe Premiere Pro is possible when a victim opens a maliciously crafted project or media fi
Arbitrary code execution in Adobe Premiere Pro via an out-of-bounds write (CWE-787) that lets an attacker run code in th
Arbitrary code execution in Adobe Premiere Pro stems from an out-of-bounds write (CWE-787) triggered when processing a s
Same weakness CWE-20 – Improper Input Validation
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today