CVE-2026-21334

Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-21357 InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-21329

After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-21323

CVE-2026-21323 affects Adobe After Effects up to version 25.6 (and earlier). It describes a Use-After-Free vulnerability in the vulnerable components that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a mali...

CVE-2026-21326

CVE-2026-21326 affects After Effects versions 25.6 and earlier and is a Use-After-Free vulnerability that could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). The provided documents do not list a fixe...

CVE-2026-21318

CVE-2026-21318 affects After Effects versions 25.6 and earlier. The issue is an out-of-bounds write leading to arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically the victim opening a malicious file. CVSSv3.1 base score 7.8 (HIGH) with...

CVE-2026-21328 After Effects | Out-of-bounds Write (CWE-787)

After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-21328 After Effects | Out-of-bounds Write (CWE-787)

After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-21330

CVE-2026-21330 affects After Effects versions 25.6 and earlier, with a Type Confusion vulnerability (Access of Resource Using Incompatible Type) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). ...

CVE-2026-21330 After Effects | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)

After Effects versions 25.6 and earlier are affected by an Access of Resource Using Incompatible Type 'Type Confusion' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

CVE-2026-21330

After Effects versions 25.6 and earlier are affected by an Access of Resource Using Incompatible Type 'Type Confusion' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

CVE-2026-21330 After Effects | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)

After Effects versions 25.6 and earlier are affected by an Access of Resource Using Incompatible Type 'Type Confusion' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

CVE-2026-21320 After Effects | Use After Free (CWE-416)

After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-21320 After Effects | Use After Free (CWE-416)

After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-21320

Adobe After Effects up to version 25.6 is affected by a Use-After-Free vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a crafted malicious file. CVSS: 3.1, base score 7.8 (HIGH), with LOCAL atta...

CVE-2026-21321 After Effects | Integer Overflow or Wraparound (CWE-190)

After Effects versions 25.6 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-21321

CVE-2026-21321 affects Adobe After Effects up to version 25.6. The issue is an integer overflow/wraparound in a component used during file parsing, leading to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a specially crafte...

CVE-2026-21321 After Effects | Integer Overflow or Wraparound (CWE-190)

After Effects versions 25.6 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-21351

After Effects 25.6 and earlier are affected by a use-after-free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (the victim must open a malicious file). CVSS:3.1 base score 7.8 (HIGH), attack vector LOCAL, attack c...

CVE-2026-21351 After Effects | Use After Free (CWE-416)

After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...