EUVD-2026-44467
GHSA-fhjh-7fwr-rp99
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Local file-open exploitation gives AV:L and UI:R with no attacker auth (PR:N); memory-corruption RCE in the user context yields full C/I/A impact with unchanged scope.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionCVE.org
After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AnalysisAI
Arbitrary code execution in Adobe After Effects arises from an out-of-bounds write (CWE-787) that runs in the context of the current user when a victim opens a maliciously crafted project or media file. Adobe (via advisory APSB26-78) confirms the flaw; there is no public exploit identified at time of analysis and it is not listed in CISA KEV. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the victim to open an attacker-crafted malicious file in Adobe After Effects - this user interaction (UI:R) is the explicit precondition stated in the CVE. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H = 7.8 High) shows full confidentiality, integrity and availability impact but constrained by a local attack vector and required user interaction - the attacker cannot reach this remotely and must convince a victim to open a malicious file. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker crafts a malicious After Effects project or asset file that triggers the out-of-bounds write and emails or shares it with a motion designer under the guise of a legitimate collaboration or client deliverable. When the victim opens the file in After Effects, the corruption is triggered and arbitrary code executes with that user's privileges. … |
| Remediation | Apply the update referenced in Adobe advisory APSB26-78 (https://helpx.adobe.com/security/products/after_effects/apsb26-78.html) via the Creative Cloud desktop app or Adobe's update mechanism - the exact fixed version number is not included in the provided data and should be taken from that advisory. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: audit all Adobe After Effects installations; restrict project file access to verified internal sources and disable external media auto-loading. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in After Effects
View allAdobe After Effects versions 16.1.2 and earlier have an out-of-bounds write vulnerability. Rated critical severity (CVSS
Adobe After Effects version 18.1 (and earlier) is affected by a potential Command injection vulnerability when chained w
Adobe After Effects version 18.1 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. Rated h
After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result i
After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result i
After Effects versions 26.0, 25.6.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that cou
After Effects versions 26.0, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result i
After Effects versions 26.0, 25.6.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could re
Arbitrary code execution in Adobe After Effects 25.6 and earlier results from an out-of-bounds read vulnerability trigge
Code execution in Adobe After Effects 25.6 and earlier through out-of-bounds memory reads when processing malicious file
Out-of-bounds memory reads in Adobe After Effects 25.6 and earlier enable arbitrary code execution when users open speci
Arbitrary code execution in Adobe After Effects 25.6 and earlier through a use-after-free memory vulnerability requires
Same weakness CWE-787 – Out-of-bounds Write
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today