cbcvebase.

Adobe After Effects vulnerabilities

127 known vulnerabilities affecting adobe/after_effects.

Total CVEs
127
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH86MEDIUM28LOW12

Vulnerabilities

Page 1 of 7
CVE-2020-3765P3CRITICALCVSS 9.8≤ 16.1.22020-02-20
CVE-2020-3765 [CRITICAL] CWE-787 CVE-2020-3765: Adobe After Effects versions 16.1.2 and earlier have an out-of-bounds write vulnerability. Successfu Adobe After Effects versions 16.1.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
nvd
CVE-2021-28571P3HIGHCVSS 8.8≤ 18.1≥ unspecified, ≤ 18.12021-09-08
CVE-2021-28571 [HIGH] CWE-78 CVE-2021-28571: Adobe After Effects version 18.1 (and earlier) is affected by a potential Command injection vulnerab Adobe After Effects version 18.1 (and earlier) is affected by a potential Command injection vulnerability when chained with a development and debugging tool for JavaScript scripts. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires use
nvd
CVE-2026-21328P3HIGHCVSS 7.8fixed in 25.6.4≤ 25.62026-02-10
CVE-2026-21328 [HIGH] CWE-787 CVE-2026-21328: After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that co After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-21318P3HIGHCVSS 7.8fixed in 25.6.4≤ 25.62026-02-10
CVE-2026-21318 [HIGH] CWE-787 CVE-2026-21318: After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that co After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-21327P3HIGHCVSS 7.8fixed in 25.6.4≤ 25.62026-02-10
CVE-2026-21327 [HIGH] CWE-787 CVE-2026-21327: After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that co After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2022-24095P3HIGHCVSS 7.8≥ 18.0, < 18.4.5≥ 22.0, < 22.2.1+1 more2022-03-11
CVE-2022-24095 [HIGH] CWE-121 CVE-2022-24095: Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-bas Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2022-24094P3HIGHCVSS 7.8≥ 18.0, < 18.4.5≥ 22.0, < 22.2.1+1 more2022-03-11
CVE-2022-24094 [HIGH] CWE-121 CVE-2022-24094: Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-bas Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2022-23200P3HIGHCVSS 7.8≤ 18.4.3≥ 22.0, ≤ 22.1.1+1 more2022-02-16
CVE-2022-23200 [HIGH] CWE-787 CVE-2022-23200: Adobe After Effects versions 22.1.1 (and earlier) and 18.4.3 (and earlier) are affected by an out-of Adobe After Effects versions 22.1.1 (and earlier) and 18.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-21320P3HIGHCVSS 7.8fixed in 25.6.4≤ 25.62026-02-10
CVE-2026-21320 [HIGH] CWE-416 CVE-2026-21320: After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could re After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-21351P3HIGHCVSS 7.8fixed in 25.6.4≤ 25.62026-02-10
CVE-2026-21351 [HIGH] CWE-416 CVE-2026-21351: After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could re After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-21323P3HIGHCVSS 7.8fixed in 25.6.4≤ 25.62026-02-10
CVE-2026-21323 [HIGH] CWE-416 CVE-2026-21323: After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could re After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-21326P3HIGHCVSS 7.8fixed in 25.6.4≤ 25.62026-02-10
CVE-2026-21326 [HIGH] CWE-416 CVE-2026-21326: After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could re After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-21329P3HIGHCVSS 7.8fixed in 25.6.4≤ 25.62026-02-10
CVE-2026-21329 [HIGH] CWE-416 CVE-2026-21329: After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could re After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-48367P3HIGHCVSS 7.8≤ 25.6.5≥ 26.0, ≤ 26.2.12026-07-14
CVE-2026-48367 [HIGH] CWE-787 CVE-2026-48367: After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary cod After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-48274P3HIGHCVSS 7.8≤ 25.6.5≥ 26.0, ≤ 26.2.12026-07-14
CVE-2026-48274 [HIGH] CWE-787 CVE-2026-48274: After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary cod After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-34643P3HIGHCVSS 7.8fixed in 25.6.5v26.0+1 more2026-05-12
CVE-2026-34643 [HIGH] CWE-787 CVE-2026-34643: After Effects versions 26.0, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability After Effects versions 26.0, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2021-28606P3HIGHCVSS 7.8≤ 18.2≥ unspecified, ≤ 18.22021-08-24
CVE-2021-28606 [HIGH] CWE-121 CVE-2021-28606: Adobe After Effects version 18.2 (and earlier) is affected by a Stack-based Buffer Overflow vulnerab Adobe After Effects version 18.2 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must
nvd
CVE-2022-27784P3HIGHCVSS 7.8≤ 18.4.5≥ 22.0, ≤ 22.2.1+1 more2022-05-06
CVE-2022-27784 [HIGH] CWE-121 CVE-2022-27784: Adobe After Effects versions 22.2.1 (and earlier) and 18.4.5 (and earlier) are affected by a stack o Adobe After Effects versions 22.2.1 (and earlier) and 18.4.5 (and earlier) are affected by a stack overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in After Effects.
nvd
CVE-2022-27783P3HIGHCVSS 7.8≤ 18.4.5≥ 22.0, ≤ 22.2.1+1 more2022-05-06
CVE-2022-27783 [HIGH] CWE-121 CVE-2022-27783: Adobe After Effects versions 22.2.1 (and earlier) and 18.4.5 (and earlier) are affected by a stack o Adobe After Effects versions 22.2.1 (and earlier) and 18.4.5 (and earlier) are affected by a stack overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in After Effects.
nvd
CVE-2021-28586P3HIGHCVSS 7.8fixed in 18.2≥ unspecified, ≤ 18.02021-06-28
CVE-2021-28586 [HIGH] CWE-787 CVE-2021-28586: After Effects version 18.0 (and earlier) are affected by an out-of-bounds write vulnerability that c After Effects version 18.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
Adobe After Effects vulnerabilities | cvebase