CVE-2026-47979
published 2026-07-14CVE-2026-47979: Media Encoder is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this…
PriorityP424medium5.5CVSS 3.1
AVLACLPRNUIRSUCHINAN
EPSS
0.24%
15.2th percentile
Media Encoder is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | adobe_media_encoder | <= 26.2.2 | — |
| adobe | media_encoder | <= 25.6.5 | — |
| adobe | media_encoder | 26.0 – 26.2.2 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Adobe Media Encoder out-of-bounds
vuldb·2026-07-15·CVSS 5.5
CVE-2026-47979 [MEDIUM] Adobe Media Encoder out-of-bounds
A vulnerability, which was classified as problematic, has been found in Adobe Media Encoder. Affected by this issue is some unknown functionality. Performing a manipulation results in out-of-bounds read.
This vulnerability is cataloged as CVE-2026-47979. The attack must be initiated from a local position. There is no exploit available.
GHSA
Media Encoder is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
ghsa_unreviewed·2026-07-14
CVE-2026-47979 [MEDIUM] CWE-125 Media Encoder is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.
Media Encoder is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-14
Published