Vulnerability-Lookup

WID-SEC-W-2026-0382

Vulnerability from csaf_certbund - Published: 2026-02-10 23:00 - Updated: 2026-02-10 23:00

Summary

Adobe Creative Cloud Applikationen: Mehrere Schwachstellen

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Adobe Creative Cloud umfasst Anwendungen und Dienste für Video, Design, Fotografie und Web.

Angriff: Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um beliebigen Programmcode auszuführen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen oder Daten zu manipulieren.

Betroffene Betriebssysteme: - MacOS X - UNIX - Windows

CVE-2026-21312

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21313

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21314

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21315

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21316

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21317

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21318

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21319

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21320

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21321

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21322

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21323

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21324

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21325

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21326

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21327

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21328

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21329

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21330

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21332

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21334

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21335

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21336

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21337

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21338

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21339

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21340

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21341

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21342

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21343

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21344

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21345

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21346

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21347

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21348

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21349

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21350

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21351

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21352

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21353

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21354

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21355

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21357

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

CVE-2026-21358

Affected products

Known affected 14 products

Product	Identifier	Version	Remediation
Adobe Creative Cloud After Effects <25.6.4 Adobe / Creative Cloud		After Effects <25.6.4
Adobe Creative Cloud Bridge  <16.0.2 Adobe / Creative Cloud		Bridge  <16.0.2
Adobe Creative Cloud Bridge  <15.1.4 (LTS) Adobe / Creative Cloud		Bridge  <15.1.4 (LTS)
Adobe Creative Cloud InDesign <ID21.2 Adobe / Creative Cloud		InDesign <ID21.2
Adobe Creative Cloud DNG SDK <1.7.2 build 2410 Adobe / Creative Cloud		DNG SDK <1.7.2 build 2410
Adobe Creative Cloud After Effects <26.0 Adobe / Creative Cloud		After Effects <26.0
Adobe Creative Cloud Substance 3D Designer <15.1.2 Adobe / Creative Cloud		Substance 3D Designer <15.1.2
Adobe Creative Cloud Lightroom Classic <14.5.2 LTS Adobe / Creative Cloud		Lightroom Classic <14.5.2 LTS
Adobe Creative Cloud Audition <26.0 Adobe / Creative Cloud		Audition <26.0
Adobe Creative Cloud Substance 3D Stager <3.1.7 Adobe / Creative Cloud		Substance 3D Stager <3.1.7
Adobe Creative Cloud Audition <25.6 Adobe / Creative Cloud		Audition <25.6
Adobe Creative Cloud Substance 3D Modeler <1.22.6 Adobe / Creative Cloud		Substance 3D Modeler <1.22.6
Adobe Creative Cloud Lightroom Classic <15.1.1 Adobe / Creative Cloud		Lightroom Classic <15.1.1
Adobe Creative Cloud InDesign <ID20.5.2 Adobe / Creative Cloud		InDesign <ID20.5.2

References

11 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://helpx.adobe.com/security/products/after_e…	external
https://helpx.adobe.com/security/products/auditio…	external
https://helpx.adobe.com/security/products/bridge/…	external
https://helpx.adobe.com/security/products/dng-sdk…	external
https://helpx.adobe.com/security/products/indesig…	external
https://helpx.adobe.com/security/products/lightro…	external
https://helpx.adobe.com/security/products/substan…	external
https://helpx.adobe.com/security/products/substan…	external
https://helpx.adobe.com/security/products/substan…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Adobe Creative Cloud umfasst Anwendungen und Dienste f\u00fcr Video, Design, Fotografie und Web.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um beliebigen Programmcode auszuf\u00fchren, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen oder Daten zu manipulieren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- MacOS X\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-0382 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0382.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-0382 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0382"
      },
      {
        "category": "external",
        "summary": "Adobe Security Bulletin APSB26-15 vom 2026-02-10",
        "url": "https://helpx.adobe.com/security/products/after_effects/apsb26-15.html"
      },
      {
        "category": "external",
        "summary": "Adobe Security Bulletin APSB26-14 vom 2026-02-10",
        "url": "https://helpx.adobe.com/security/products/audition/apsb26-14.html"
      },
      {
        "category": "external",
        "summary": "Adobe Security Bulletin APSB26-21 vom 2026-02-10",
        "url": "https://helpx.adobe.com/security/products/bridge/apsb26-21.html"
      },
      {
        "category": "external",
        "summary": "Adobe Security Bulletin APSB26-23 vom 2026-02-10",
        "url": "https://helpx.adobe.com/security/products/dng-sdk/apsb26-23.html"
      },
      {
        "category": "external",
        "summary": "Adobe Security Bulletin APSB26-17 vom 2026-02-10",
        "url": "https://helpx.adobe.com/security/products/indesign/apsb26-17.html"
      },
      {
        "category": "external",
        "summary": "Adobe Security Bulletin APSB26-06 vom 2026-02-10",
        "url": "https://helpx.adobe.com/security/products/lightroom/apsb26-06.html"
      },
      {
        "category": "external",
        "summary": "Adobe Security Bulletin APSB26-19 vom 2026-02-10",
        "url": "https://helpx.adobe.com/security/products/substance3d_designer/apsb26-19.html"
      },
      {
        "category": "external",
        "summary": "Adobe Security Bulletin APSB26-22 vom 2026-02-10",
        "url": "https://helpx.adobe.com/security/products/substance3d-modeler/apsb26-22.html"
      },
      {
        "category": "external",
        "summary": "Adobe Security Bulletin APSB26-20 vom 2026-02-10",
        "url": "https://helpx.adobe.com/security/products/substance3d_stager/apsb26-20.html"
      }
    ],
    "source_lang": "en-US",
    "title": "Adobe Creative Cloud Applikationen: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-02-10T23:00:00.000+00:00",
      "generator": {
        "date": "2026-02-11T10:17:47.785+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2026-0382",
      "initial_release_date": "2026-02-10T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-02-10T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "After Effects \u003c25.6.4",
                "product": {
                  "name": "Adobe Creative Cloud After Effects \u003c25.6.4",
                  "product_id": "T050798"
                }
              },
              {
                "category": "product_version_range",
                "name": "After Effects 25.6.4",
                "product": {
                  "name": "Adobe Creative Cloud After Effects 25.6.4",
                  "product_id": "T050798-fixed"
                }
              },
              {
                "category": "product_version_range",
                "name": "After Effects \u003c26.0",
                "product": {
                  "name": "Adobe Creative Cloud After Effects \u003c26.0",
                  "product_id": "T050800"
                }
              },
              {
                "category": "product_version_range",
                "name": "After Effects 26.0",
                "product": {
                  "name": "Adobe Creative Cloud After Effects 26.0",
                  "product_id": "T050800-fixed"
                }
              },
              {
                "category": "product_version_range",
                "name": "Audition \u003c25.6",
                "product": {
                  "name": "Adobe Creative Cloud Audition \u003c25.6",
                  "product_id": "T050801"
                }
              },
              {
                "category": "product_version",
                "name": "Audition 25.6",
                "product": {
                  "name": "Adobe Creative Cloud Audition 25.6",
                  "product_id": "T050801-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:adobe:creative_cloud:audition__25.6"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Audition \u003c26.0",
                "product": {
                  "name": "Adobe Creative Cloud Audition \u003c26.0",
                  "product_id": "T050802"
                }
              },
              {
                "category": "product_version",
                "name": "Audition 26.0",
                "product": {
                  "name": "Adobe Creative Cloud Audition 26.0",
                  "product_id": "T050802-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:adobe:creative_cloud:audition__26.0"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Bridge\u202f \u003c15.1.4 (LTS)",
                "product": {
                  "name": "Adobe Creative Cloud Bridge\u202f \u003c15.1.4 (LTS)",
                  "product_id": "T050803"
                }
              },
              {
                "category": "product_version",
                "name": "Bridge\u202f 15.1.4 (LTS)",
                "product": {
                  "name": "Adobe Creative Cloud Bridge\u202f 15.1.4 (LTS)",
                  "product_id": "T050803-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:adobe:creative_cloud:bridge__15.1.4_%2528lts%2529"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Bridge\u202f \u003c16.0.2",
                "product": {
                  "name": "Adobe Creative Cloud Bridge\u202f \u003c16.0.2",
                  "product_id": "T050804"
                }
              },
              {
                "category": "product_version",
                "name": "Bridge\u202f 16.0.2",
                "product": {
                  "name": "Adobe Creative Cloud Bridge\u202f 16.0.2",
                  "product_id": "T050804-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:adobe:creative_cloud:bridge__16.0.2"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "DNG SDK \u003c1.7.2 build 2410",
                "product": {
                  "name": "Adobe Creative Cloud DNG SDK \u003c1.7.2 build 2410",
                  "product_id": "T050805"
                }
              },
              {
                "category": "product_version",
                "name": "DNG SDK 1.7.2 build 2410",
                "product": {
                  "name": "Adobe Creative Cloud DNG SDK 1.7.2 build 2410",
                  "product_id": "T050805-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:adobe:creative_cloud:dng_sdk__1.7.2_build_2410"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "InDesign \u003cID21.2",
                "product": {
                  "name": "Adobe Creative Cloud InDesign \u003cID21.2",
                  "product_id": "T050806"
                }
              },
              {
                "category": "product_version",
                "name": "InDesign ID21.2",
                "product": {
                  "name": "Adobe Creative Cloud InDesign ID21.2",
                  "product_id": "T050806-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:adobe:creative_cloud:indesign__id21.2"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "InDesign \u003cID20.5.2",
                "product": {
                  "name": "Adobe Creative Cloud InDesign \u003cID20.5.2",
                  "product_id": "T050807"
                }
              },
              {
                "category": "product_version",
                "name": "InDesign ID20.5.2",
                "product": {
                  "name": "Adobe Creative Cloud InDesign ID20.5.2",
                  "product_id": "T050807-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:adobe:creative_cloud:indesign__id20.5.2"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Lightroom Classic \u003c15.1.1",
                "product": {
                  "name": "Adobe Creative Cloud Lightroom Classic \u003c15.1.1",
                  "product_id": "T050808"
                }
              },
              {
                "category": "product_version",
                "name": "Lightroom Classic 15.1.1",
                "product": {
                  "name": "Adobe Creative Cloud Lightroom Classic 15.1.1",
                  "product_id": "T050808-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:adobe:creative_cloud:lightroom_classic__15.1.1"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Lightroom Classic \u003c14.5.2 LTS",
                "product": {
                  "name": "Adobe Creative Cloud Lightroom Classic \u003c14.5.2 LTS",
                  "product_id": "T050810"
                }
              },
              {
                "category": "product_version",
                "name": "Lightroom Classic 14.5.2 LTS",
                "product": {
                  "name": "Adobe Creative Cloud Lightroom Classic 14.5.2 LTS",
                  "product_id": "T050810-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:adobe:creative_cloud:lightroom_classic__14.5.2_lts"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Substance 3D Designer \u003c15.1.2",
                "product": {
                  "name": "Adobe Creative Cloud Substance 3D Designer \u003c15.1.2",
                  "product_id": "T050811"
                }
              },
              {
                "category": "product_version",
                "name": "Substance 3D Designer 15.1.2",
                "product": {
                  "name": "Adobe Creative Cloud Substance 3D Designer 15.1.2",
                  "product_id": "T050811-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:adobe:creative_cloud:substance_3d_designer__15.1.2"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Substance 3D Modeler \u003c1.22.6",
                "product": {
                  "name": "Adobe Creative Cloud Substance 3D Modeler \u003c1.22.6",
                  "product_id": "T050812"
                }
              },
              {
                "category": "product_version",
                "name": "Substance 3D Modeler 1.22.6",
                "product": {
                  "name": "Adobe Creative Cloud Substance 3D Modeler 1.22.6",
                  "product_id": "T050812-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:adobe:creative_cloud:substance_3d_modeler__1.22.6"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Substance 3D Stager \u003c3.1.7",
                "product": {
                  "name": "Adobe Creative Cloud Substance 3D Stager \u003c3.1.7",
                  "product_id": "T050813"
                }
              },
              {
                "category": "product_version",
                "name": "Substance 3D Stager 3.1.7",
                "product": {
                  "name": "Adobe Creative Cloud Substance 3D Stager 3.1.7",
                  "product_id": "T050813-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:adobe:creative_cloud:substance_3d_stager__3.1.7"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Creative Cloud"
          }
        ],
        "category": "vendor",
        "name": "Adobe"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-21312",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21312"
    },
    {
      "cve": "CVE-2026-21313",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21313"
    },
    {
      "cve": "CVE-2026-21314",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21314"
    },
    {
      "cve": "CVE-2026-21315",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21315"
    },
    {
      "cve": "CVE-2026-21316",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21316"
    },
    {
      "cve": "CVE-2026-21317",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21317"
    },
    {
      "cve": "CVE-2026-21318",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21318"
    },
    {
      "cve": "CVE-2026-21319",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21319"
    },
    {
      "cve": "CVE-2026-21320",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21320"
    },
    {
      "cve": "CVE-2026-21321",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21321"
    },
    {
      "cve": "CVE-2026-21322",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21322"
    },
    {
      "cve": "CVE-2026-21323",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21323"
    },
    {
      "cve": "CVE-2026-21324",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21324"
    },
    {
      "cve": "CVE-2026-21325",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21325"
    },
    {
      "cve": "CVE-2026-21326",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21326"
    },
    {
      "cve": "CVE-2026-21327",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21327"
    },
    {
      "cve": "CVE-2026-21328",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21328"
    },
    {
      "cve": "CVE-2026-21329",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21329"
    },
    {
      "cve": "CVE-2026-21330",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21330"
    },
    {
      "cve": "CVE-2026-21332",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21332"
    },
    {
      "cve": "CVE-2026-21334",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21334"
    },
    {
      "cve": "CVE-2026-21335",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21335"
    },
    {
      "cve": "CVE-2026-21336",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21336"
    },
    {
      "cve": "CVE-2026-21337",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21337"
    },
    {
      "cve": "CVE-2026-21338",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21338"
    },
    {
      "cve": "CVE-2026-21339",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21339"
    },
    {
      "cve": "CVE-2026-21340",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21340"
    },
    {
      "cve": "CVE-2026-21341",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21341"
    },
    {
      "cve": "CVE-2026-21342",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21342"
    },
    {
      "cve": "CVE-2026-21343",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21343"
    },
    {
      "cve": "CVE-2026-21344",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21344"
    },
    {
      "cve": "CVE-2026-21345",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21345"
    },
    {
      "cve": "CVE-2026-21346",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21346"
    },
    {
      "cve": "CVE-2026-21347",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21347"
    },
    {
      "cve": "CVE-2026-21348",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21348"
    },
    {
      "cve": "CVE-2026-21349",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21349"
    },
    {
      "cve": "CVE-2026-21350",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21350"
    },
    {
      "cve": "CVE-2026-21351",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21351"
    },
    {
      "cve": "CVE-2026-21352",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21352"
    },
    {
      "cve": "CVE-2026-21353",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21353"
    },
    {
      "cve": "CVE-2026-21354",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21354"
    },
    {
      "cve": "CVE-2026-21355",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21355"
    },
    {
      "cve": "CVE-2026-21357",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21357"
    },
    {
      "cve": "CVE-2026-21358",
      "product_status": {
        "known_affected": [
          "T050798",
          "T050804",
          "T050803",
          "T050806",
          "T050805",
          "T050800",
          "T050811",
          "T050810",
          "T050802",
          "T050813",
          "T050801",
          "T050812",
          "T050808",
          "T050807"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-21358"
    }
  ]
}

CVE-2026-21312 (GCVE-0-2026-21312)

Vulnerability from cvelistv5 – Published: 2026-02-10 17:45 – Updated: 2026-02-26 15:04

Title

Audition | Out-of-bounds Write (CWE-787)

Summary

Audition versions 25.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-787 - Out-of-bounds Write (CWE-787)

Assigner

adobe

References

1 reference

URL	Tags
https://helpx.adobe.com/security/products/auditio…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Adobe	Audition	Affected: 0 , ≤ 25.3 (semver)

Date Public

2026-02-10 17:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-21312",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-11T04:56:47.088004Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T15:04:07.505Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "Audition",
          "vendor": "Adobe",
          "versions": [
            {
              "lessThanOrEqual": "25.3",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "datePublic": "2026-02-10T17:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Audition versions 25.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "environmentalScore": 7.8,
            "environmentalSeverity": "HIGH",
            "exploitCodeMaturity": "NOT_DEFINED",
            "integrityImpact": "HIGH",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "LOW",
            "modifiedAttackVector": "LOCAL",
            "modifiedAvailabilityImpact": "HIGH",
            "modifiedConfidentialityImpact": "HIGH",
            "modifiedIntegrityImpact": "HIGH",
            "modifiedPrivilegesRequired": "NONE",
            "modifiedScope": "UNCHANGED",
            "modifiedUserInteraction": "REQUIRED",
            "privilegesRequired": "NONE",
            "remediationLevel": "NOT_DEFINED",
            "reportConfidence": "NOT_DEFINED",
            "scope": "UNCHANGED",
            "temporalScore": 7.8,
            "temporalSeverity": "HIGH",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "Out-of-bounds Write (CWE-787)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-10T17:45:15.153Z",
        "orgId": "078d4453-3bcd-4900-85e6-15281da43538",
        "shortName": "adobe"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://helpx.adobe.com/security/products/audition/apsb26-14.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Audition | Out-of-bounds Write (CWE-787)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
    "assignerShortName": "adobe",
    "cveId": "CVE-2026-21312",
    "datePublished": "2026-02-10T17:45:15.153Z",
    "dateReserved": "2025-12-12T22:01:18.192Z",
    "dateUpdated": "2026-02-26T15:04:07.505Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-21313 (GCVE-0-2026-21313)

Vulnerability from cvelistv5 – Published: 2026-02-10 17:45 – Updated: 2026-02-11 15:19

Title

Audition | Out-of-bounds Read (CWE-125)

Summary

Audition versions 25.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-125 - Out-of-bounds Read (CWE-125)

Assigner

adobe

References

1 reference

URL	Tags
https://helpx.adobe.com/security/products/auditio…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Adobe	Audition	Affected: 0 , ≤ 25.3 (semver)

Date Public

2026-02-10 17:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-21313",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-11T15:19:08.797426Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-11T15:19:20.194Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "Audition",
          "vendor": "Adobe",
          "versions": [
            {
              "lessThanOrEqual": "25.3",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "datePublic": "2026-02-10T17:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Audition versions 25.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "environmentalScore": 5.5,
            "environmentalSeverity": "MEDIUM",
            "exploitCodeMaturity": "NOT_DEFINED",
            "integrityImpact": "NONE",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "LOW",
            "modifiedAttackVector": "LOCAL",
            "modifiedAvailabilityImpact": "NONE",
            "modifiedConfidentialityImpact": "HIGH",
            "modifiedIntegrityImpact": "NONE",
            "modifiedPrivilegesRequired": "NONE",
            "modifiedScope": "UNCHANGED",
            "modifiedUserInteraction": "REQUIRED",
            "privilegesRequired": "NONE",
            "remediationLevel": "NOT_DEFINED",
            "reportConfidence": "NOT_DEFINED",
            "scope": "UNCHANGED",
            "temporalScore": 5.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out-of-bounds Read (CWE-125)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-10T17:45:13.138Z",
        "orgId": "078d4453-3bcd-4900-85e6-15281da43538",
        "shortName": "adobe"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://helpx.adobe.com/security/products/audition/apsb26-14.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Audition | Out-of-bounds Read (CWE-125)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
    "assignerShortName": "adobe",
    "cveId": "CVE-2026-21313",
    "datePublished": "2026-02-10T17:45:13.138Z",
    "dateReserved": "2025-12-12T22:01:18.193Z",
    "dateUpdated": "2026-02-11T15:19:20.194Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-21314 (GCVE-0-2026-21314)

Vulnerability from cvelistv5 – Published: 2026-02-10 17:45 – Updated: 2026-02-11 15:14

Title

Audition | Out-of-bounds Read (CWE-125)

Summary

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-125 - Out-of-bounds Read (CWE-125)

Assigner

adobe

References

1 reference

URL	Tags
https://helpx.adobe.com/security/products/auditio…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Adobe	Audition	Affected: 0 , ≤ 25.3 (semver)

Date Public

2026-02-10 17:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-21314",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-11T15:14:33.261390Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-11T15:14:47.126Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "Audition",
          "vendor": "Adobe",
          "versions": [
            {
              "lessThanOrEqual": "25.3",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "datePublic": "2026-02-10T17:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Audition versions 25.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "environmentalScore": 5.5,
            "environmentalSeverity": "MEDIUM",
            "exploitCodeMaturity": "NOT_DEFINED",
            "integrityImpact": "NONE",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "LOW",
            "modifiedAttackVector": "LOCAL",
            "modifiedAvailabilityImpact": "NONE",
            "modifiedConfidentialityImpact": "HIGH",
            "modifiedIntegrityImpact": "NONE",
            "modifiedPrivilegesRequired": "NONE",
            "modifiedScope": "UNCHANGED",
            "modifiedUserInteraction": "REQUIRED",
            "privilegesRequired": "NONE",
            "remediationLevel": "NOT_DEFINED",
            "reportConfidence": "NOT_DEFINED",
            "scope": "UNCHANGED",
            "temporalScore": 5.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out-of-bounds Read (CWE-125)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-10T17:45:11.465Z",
        "orgId": "078d4453-3bcd-4900-85e6-15281da43538",
        "shortName": "adobe"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://helpx.adobe.com/security/products/audition/apsb26-14.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Audition | Out-of-bounds Read (CWE-125)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
    "assignerShortName": "adobe",
    "cveId": "CVE-2026-21314",
    "datePublished": "2026-02-10T17:45:11.465Z",
    "dateReserved": "2025-12-12T22:01:18.193Z",
    "dateUpdated": "2026-02-11T15:14:47.126Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-21315 (GCVE-0-2026-21315)

Vulnerability from cvelistv5 – Published: 2026-02-10 17:45 – Updated: 2026-02-11 15:20

Title

Audition | Out-of-bounds Read (CWE-125)

Summary

Audition versions 25.3 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-125 - Out-of-bounds Read (CWE-125)

Assigner

adobe

References

1 reference

URL	Tags
https://helpx.adobe.com/security/products/auditio…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Adobe	Audition	Affected: 0 , ≤ 25.3 (semver)

Date Public

2026-02-10 17:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-21315",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-11T15:20:31.687320Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-11T15:20:48.254Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "Audition",
          "vendor": "Adobe",
          "versions": [
            {
              "lessThanOrEqual": "25.3",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "datePublic": "2026-02-10T17:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Audition versions 25.3 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "environmentalScore": 5.5,
            "environmentalSeverity": "MEDIUM",
            "exploitCodeMaturity": "NOT_DEFINED",
            "integrityImpact": "NONE",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "LOW",
            "modifiedAttackVector": "LOCAL",
            "modifiedAvailabilityImpact": "NONE",
            "modifiedConfidentialityImpact": "HIGH",
            "modifiedIntegrityImpact": "NONE",
            "modifiedPrivilegesRequired": "NONE",
            "modifiedScope": "UNCHANGED",
            "modifiedUserInteraction": "REQUIRED",
            "privilegesRequired": "NONE",
            "remediationLevel": "NOT_DEFINED",
            "reportConfidence": "NOT_DEFINED",
            "scope": "UNCHANGED",
            "temporalScore": 5.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out-of-bounds Read (CWE-125)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-10T17:45:14.184Z",
        "orgId": "078d4453-3bcd-4900-85e6-15281da43538",
        "shortName": "adobe"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://helpx.adobe.com/security/products/audition/apsb26-14.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Audition | Out-of-bounds Read (CWE-125)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
    "assignerShortName": "adobe",
    "cveId": "CVE-2026-21315",
    "datePublished": "2026-02-10T17:45:14.184Z",
    "dateReserved": "2025-12-12T22:01:18.193Z",
    "dateUpdated": "2026-02-11T15:20:48.254Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-21316 (GCVE-0-2026-21316)

Vulnerability from cvelistv5 – Published: 2026-02-10 17:45 – Updated: 2026-02-11 15:21

Title

Audition | Access of Memory Location After End of Buffer (CWE-788)

Summary

Audition versions 25.3 and earlier are affected by an Access of Memory Location After End of Buffer vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to cause the application to crash or become unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-788 - Access of Memory Location After End of Buffer (CWE-788)

Assigner

adobe

References

1 reference

URL	Tags
https://helpx.adobe.com/security/products/auditio…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Adobe	Audition	Affected: 0 , ≤ 25.3 (semver)

Date Public

2026-02-10 17:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-21316",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-11T15:21:33.304851Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-11T15:21:45.604Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "Audition",
          "vendor": "Adobe",
          "versions": [
            {
              "lessThanOrEqual": "25.3",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "datePublic": "2026-02-10T17:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Audition versions 25.3 and earlier are affected by an Access of Memory Location After End of Buffer vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to cause the application to crash or become unresponsive. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "confidentialityRequirement": "NOT_DEFINED",
            "environmentalScore": 5.5,
            "environmentalSeverity": "MEDIUM",
            "exploitCodeMaturity": "NOT_DEFINED",
            "integrityImpact": "NONE",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "LOW",
            "modifiedAttackVector": "LOCAL",
            "modifiedAvailabilityImpact": "HIGH",
            "modifiedConfidentialityImpact": "NONE",
            "modifiedIntegrityImpact": "NONE",
            "modifiedPrivilegesRequired": "NONE",
            "modifiedScope": "UNCHANGED",
            "modifiedUserInteraction": "REQUIRED",
            "privilegesRequired": "NONE",
            "remediationLevel": "NOT_DEFINED",
            "reportConfidence": "NOT_DEFINED",
            "scope": "UNCHANGED",
            "temporalScore": 5.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-788",
              "description": "Access of Memory Location After End of Buffer (CWE-788)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-10T17:45:15.912Z",
        "orgId": "078d4453-3bcd-4900-85e6-15281da43538",
        "shortName": "adobe"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://helpx.adobe.com/security/products/audition/apsb26-14.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Audition | Access of Memory Location After End of Buffer (CWE-788)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
    "assignerShortName": "adobe",
    "cveId": "CVE-2026-21316",
    "datePublished": "2026-02-10T17:45:15.912Z",
    "dateReserved": "2025-12-12T22:01:18.193Z",
    "dateUpdated": "2026-02-11T15:21:45.604Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-21317 (GCVE-0-2026-21317)

Vulnerability from cvelistv5 – Published: 2026-02-10 17:45 – Updated: 2026-02-11 15:18

Title

Audition | Out-of-bounds Read (CWE-125)

Summary

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-125 - Out-of-bounds Read (CWE-125)

Assigner

adobe

References

1 reference

URL	Tags
https://helpx.adobe.com/security/products/auditio…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Adobe	Audition	Affected: 0 , ≤ 25.3 (semver)

Date Public

2026-02-10 17:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-21317",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-11T15:17:28.006243Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-11T15:18:35.816Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "Audition",
          "vendor": "Adobe",
          "versions": [
            {
              "lessThanOrEqual": "25.3",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "datePublic": "2026-02-10T17:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Audition versions 25.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "environmentalScore": 5.5,
            "environmentalSeverity": "MEDIUM",
            "exploitCodeMaturity": "NOT_DEFINED",
            "integrityImpact": "NONE",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "LOW",
            "modifiedAttackVector": "LOCAL",
            "modifiedAvailabilityImpact": "NONE",
            "modifiedConfidentialityImpact": "HIGH",
            "modifiedIntegrityImpact": "NONE",
            "modifiedPrivilegesRequired": "NONE",
            "modifiedScope": "UNCHANGED",
            "modifiedUserInteraction": "REQUIRED",
            "privilegesRequired": "NONE",
            "remediationLevel": "NOT_DEFINED",
            "reportConfidence": "NOT_DEFINED",
            "scope": "UNCHANGED",
            "temporalScore": 5.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out-of-bounds Read (CWE-125)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-10T17:45:12.328Z",
        "orgId": "078d4453-3bcd-4900-85e6-15281da43538",
        "shortName": "adobe"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://helpx.adobe.com/security/products/audition/apsb26-14.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Audition | Out-of-bounds Read (CWE-125)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
    "assignerShortName": "adobe",
    "cveId": "CVE-2026-21317",
    "datePublished": "2026-02-10T17:45:12.328Z",
    "dateReserved": "2025-12-12T22:01:18.193Z",
    "dateUpdated": "2026-02-11T15:18:35.816Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-21318 (GCVE-0-2026-21318)

Vulnerability from cvelistv5 – Published: 2026-02-10 17:53 – Updated: 2026-02-26 14:44

Title

After Effects | Out-of-bounds Write (CWE-787)

Summary

After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-787 - Out-of-bounds Write (CWE-787)

Assigner

adobe

References

1 reference

URL	Tags
https://helpx.adobe.com/security/products/after_e…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Adobe	After Effects	Affected: 0 , ≤ 25.6 (semver)

Date Public

2026-02-10 17:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-21318",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-11T04:56:33.085067Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T14:44:35.501Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "After Effects",
          "vendor": "Adobe",
          "versions": [
            {
              "lessThanOrEqual": "25.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "datePublic": "2026-02-10T17:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "environmentalScore": 7.8,
            "environmentalSeverity": "HIGH",
            "exploitCodeMaturity": "NOT_DEFINED",
            "integrityImpact": "HIGH",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "LOW",
            "modifiedAttackVector": "LOCAL",
            "modifiedAvailabilityImpact": "HIGH",
            "modifiedConfidentialityImpact": "HIGH",
            "modifiedIntegrityImpact": "HIGH",
            "modifiedPrivilegesRequired": "NONE",
            "modifiedScope": "UNCHANGED",
            "modifiedUserInteraction": "REQUIRED",
            "privilegesRequired": "NONE",
            "remediationLevel": "NOT_DEFINED",
            "reportConfidence": "NOT_DEFINED",
            "scope": "UNCHANGED",
            "temporalScore": 7.8,
            "temporalSeverity": "HIGH",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "Out-of-bounds Write (CWE-787)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-10T17:53:01.373Z",
        "orgId": "078d4453-3bcd-4900-85e6-15281da43538",
        "shortName": "adobe"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://helpx.adobe.com/security/products/after_effects/apsb26-15.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "After Effects | Out-of-bounds Write (CWE-787)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
    "assignerShortName": "adobe",
    "cveId": "CVE-2026-21318",
    "datePublished": "2026-02-10T17:53:01.373Z",
    "dateReserved": "2025-12-12T22:01:18.193Z",
    "dateUpdated": "2026-02-26T14:44:35.501Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-21319 (GCVE-0-2026-21319)

Vulnerability from cvelistv5 – Published: 2026-02-10 17:52 – Updated: 2026-02-11 15:17

Title

After Effects | Out-of-bounds Read (CWE-125)

Summary

After Effects versions 25.6 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-125 - Out-of-bounds Read (CWE-125)

Assigner

adobe

References

1 reference

URL	Tags
https://helpx.adobe.com/security/products/after_e…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Adobe	After Effects	Affected: 0 , ≤ 25.6 (semver)

Date Public

2026-02-10 17:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-21319",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-11T15:17:25.520647Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-11T15:17:34.056Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "After Effects",
          "vendor": "Adobe",
          "versions": [
            {
              "lessThanOrEqual": "25.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "datePublic": "2026-02-10T17:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "After Effects versions 25.6 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "environmentalScore": 5.5,
            "environmentalSeverity": "MEDIUM",
            "exploitCodeMaturity": "NOT_DEFINED",
            "integrityImpact": "NONE",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "LOW",
            "modifiedAttackVector": "LOCAL",
            "modifiedAvailabilityImpact": "NONE",
            "modifiedConfidentialityImpact": "HIGH",
            "modifiedIntegrityImpact": "NONE",
            "modifiedPrivilegesRequired": "NONE",
            "modifiedScope": "UNCHANGED",
            "modifiedUserInteraction": "REQUIRED",
            "privilegesRequired": "NONE",
            "remediationLevel": "NOT_DEFINED",
            "reportConfidence": "NOT_DEFINED",
            "scope": "UNCHANGED",
            "temporalScore": 5.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out-of-bounds Read (CWE-125)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-10T17:52:59.476Z",
        "orgId": "078d4453-3bcd-4900-85e6-15281da43538",
        "shortName": "adobe"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://helpx.adobe.com/security/products/after_effects/apsb26-15.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "After Effects | Out-of-bounds Read (CWE-125)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
    "assignerShortName": "adobe",
    "cveId": "CVE-2026-21319",
    "datePublished": "2026-02-10T17:52:59.476Z",
    "dateReserved": "2025-12-12T22:01:18.193Z",
    "dateUpdated": "2026-02-11T15:17:34.056Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-21320 (GCVE-0-2026-21320)

Vulnerability from cvelistv5 – Published: 2026-02-10 17:52 – Updated: 2026-02-26 14:44

Title

After Effects | Use After Free (CWE-416)

Summary

After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-416 - Use After Free (CWE-416)

Assigner

adobe

References

1 reference

URL	Tags
https://helpx.adobe.com/security/products/after_e…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Adobe	After Effects	Affected: 0 , ≤ 25.6 (semver)

Date Public

2026-02-10 17:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-21320",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-11T04:56:33.871631Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T14:44:37.073Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "After Effects",
          "vendor": "Adobe",
          "versions": [
            {
              "lessThanOrEqual": "25.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "datePublic": "2026-02-10T17:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "environmentalScore": 7.8,
            "environmentalSeverity": "HIGH",
            "exploitCodeMaturity": "NOT_DEFINED",
            "integrityImpact": "HIGH",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "LOW",
            "modifiedAttackVector": "LOCAL",
            "modifiedAvailabilityImpact": "HIGH",
            "modifiedConfidentialityImpact": "HIGH",
            "modifiedIntegrityImpact": "HIGH",
            "modifiedPrivilegesRequired": "NONE",
            "modifiedScope": "UNCHANGED",
            "modifiedUserInteraction": "REQUIRED",
            "privilegesRequired": "NONE",
            "remediationLevel": "NOT_DEFINED",
            "reportConfidence": "NOT_DEFINED",
            "scope": "UNCHANGED",
            "temporalScore": 7.8,
            "temporalSeverity": "HIGH",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use After Free (CWE-416)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-10T17:52:55.296Z",
        "orgId": "078d4453-3bcd-4900-85e6-15281da43538",
        "shortName": "adobe"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://helpx.adobe.com/security/products/after_effects/apsb26-15.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "After Effects | Use After Free (CWE-416)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
    "assignerShortName": "adobe",
    "cveId": "CVE-2026-21320",
    "datePublished": "2026-02-10T17:52:55.296Z",
    "dateReserved": "2025-12-12T22:01:18.193Z",
    "dateUpdated": "2026-02-26T14:44:37.073Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-21321 (GCVE-0-2026-21321)

Vulnerability from cvelistv5 – Published: 2026-02-10 17:52 – Updated: 2026-02-26 14:44

Title

After Effects | Integer Overflow or Wraparound (CWE-190)

Summary

After Effects versions 25.6 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-190 - Integer Overflow or Wraparound (CWE-190)

Assigner

adobe

References

1 reference

URL	Tags
https://helpx.adobe.com/security/products/after_e…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Adobe	After Effects	Affected: 0 , ≤ 25.6 (semver)

Date Public

2026-02-10 17:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-21321",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-11T04:56:34.631497Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T14:44:37.358Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "After Effects",
          "vendor": "Adobe",
          "versions": [
            {
              "lessThanOrEqual": "25.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "datePublic": "2026-02-10T17:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "After Effects versions 25.6 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "confidentialityRequirement": "NOT_DEFINED",
            "environmentalScore": 7.8,
            "environmentalSeverity": "HIGH",
            "exploitCodeMaturity": "NOT_DEFINED",
            "integrityImpact": "HIGH",
            "integrityRequirement": "NOT_DEFINED",
            "modifiedAttackComplexity": "LOW",
            "modifiedAttackVector": "LOCAL",
            "modifiedAvailabilityImpact": "HIGH",
            "modifiedConfidentialityImpact": "HIGH",
            "modifiedIntegrityImpact": "HIGH",
            "modifiedPrivilegesRequired": "NONE",
            "modifiedScope": "UNCHANGED",
            "modifiedUserInteraction": "REQUIRED",
            "privilegesRequired": "NONE",
            "remediationLevel": "NOT_DEFINED",
            "reportConfidence": "NOT_DEFINED",
            "scope": "UNCHANGED",
            "temporalScore": 7.8,
            "temporalSeverity": "HIGH",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "Integer Overflow or Wraparound (CWE-190)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-10T17:52:54.489Z",
        "orgId": "078d4453-3bcd-4900-85e6-15281da43538",
        "shortName": "adobe"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://helpx.adobe.com/security/products/after_effects/apsb26-15.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "After Effects | Integer Overflow or Wraparound (CWE-190)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
    "assignerShortName": "adobe",
    "cveId": "CVE-2026-21321",
    "datePublished": "2026-02-10T17:52:54.489Z",
    "dateReserved": "2025-12-12T22:01:18.193Z",
    "dateUpdated": "2026-02-26T14:44:37.358Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2026-0382

CVE-2026-21312 (GCVE-0-2026-21312)

CVE-2026-21313 (GCVE-0-2026-21313)

CVE-2026-21314 (GCVE-0-2026-21314)

CVE-2026-21315 (GCVE-0-2026-21315)

CVE-2026-21316 (GCVE-0-2026-21316)

CVE-2026-21317 (GCVE-0-2026-21317)

CVE-2026-21318 (GCVE-0-2026-21318)

CVE-2026-21319 (GCVE-0-2026-21319)

CVE-2026-21320 (GCVE-0-2026-21320)

CVE-2026-21321 (GCVE-0-2026-21321)

Tags

Sightings

Nomenclature