CVE-2024-20737

Adobe After Effects is affected by CVE-2024-20737: an out-of-bounds read in RGB file parsing that can disclose sensitive memory and bypass ASLR. Affected versions include 24.1, 23.6.2 and earlier. Exploitation requires user interaction (victim opens a malicious file) and may have a high confident...

CVE-2025-27182

Adobe After Effects is affected by an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution in the context of the current user. Affected versions include 25.1, 24.6.4 and earlier. Exploitation requires user interaction, as a victim must open a malicious file. Detai...

CVE-2025-27204

CVE-2025-27204 affects Adobe After Effects up to versions 25.1 and 24.6.4 and earlier, due to an out-of-bounds read that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Connected sources indicate Adobe released APSB25-23 security upda...

CVE-2021-28587

Adobe After Effects contains an out-of-bounds read vulnerability (CVE-2021-28587) in the TIFF parsing path affecting version 18.0 and earlier. An attacker could disclose memory and bypass ASLR, with exploitation requiring user interaction (opening a malicious file). Production notes from APSB21-3...

CVE-2024-39381

CVE-2024-39381 affects Adobe After Effects versions 23.6.6, 24.5 and earlier, due to an out-of-bounds write that could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction (the victim must open a malicious file). Context: the vulnerability is ...

CVE-2024-49537

CVE-2024-49537 affects Adobe After Effects up to versions 24.6.2 and 25.0.1 (and earlier). It is a stack-based buffer overflow that could allow arbitrary code execution in the context of the current user, with exploitation requiring user interaction (opening a malicious file). Adobe released an u...

CVE-2025-27185

CVE-2025-27185 affects Adobe After Effects versions 25.1, 24.6.4 and earlier, due to a NULL Pointer Dereference that can crash the application and cause a denial-of-service. Exploitation requires user interaction (open a malicious file). Related sources corroborate the issue and note updates addr...

CVE-2025-27183

CVE-2025-27183 concerns an out-of-bounds write in Adobe After Effects affecting versions 25.1, 24.6.4 and earlier, allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Connected sources reference the APSB25-2...

CVE-2020-9662

CVE-2020-9662 affects Adobe After Effects 17.1 and earlier. The flaw is an out-of-bounds write in the application, which could enable arbitrary code execution on exploitation. The issue was addressed in APSB20-35 with a patch to at least version 17.1.1 (macOS/Windows advisories referenced in conn...

CVE-2021-28586

Adobe After Effects is affected by CVE-2021-28586 in versions 18.0 and earlier, due to an out-of-bounds write in PDF file parsing that could allow arbitrary code execution. Exploitation requires the user to open a malicious file and is described as a user interaction scenario. The issue is addres...

CVE-2024-41867

CVE-2024-41867 affects Adobe After Effects versions 23.6.6, 24.5 and earlier, with an out-of-bounds read that could disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). remediation is via Adobe APSB24-55 security update (fixed in 23.6....

CVE-2025-27186

CVE-2025-27186 affects Adobe After Effects, with an out-of-bounds read in versions 25.1, 24.6.4 and earlier that can disclose memory contents. The vulnerability allows bypassing mitigations like ASLR and requires a user to open a malicious file to exploit. Public documentation from Adobe referenc...

CVE-2024-39380

CVE-2024-39380 affects Adobe After Effects versions 23.6.6, 24.5 and earlier, with a heap-based buffer overflow that could allow arbitrary code execution in the current user context. exploitation requires user interaction: the victim must open a malicious file. The available connected documents c...

CVE-2024-41859

CVE-2024-41859 affects Adobe After Effects, specifically versions 23.6.6, 24.5 and earlier. The issue is an out-of-bounds write in the affected code path that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, as a victim must open a m...

CVE-2025-27187

Adobe After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability (CVE-2025-27187) that could disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Connected sources confirm the issue and cite APS...

CVE-2025-27184

Adobe After Effects is affected by an out-of-bounds read vulnerability (CVE-2025-27184) in versions 25.1, 24.6.4 and earlier. The issue can disclose sensitive memory and may bypass mitigations such as ASLR. Exploitation requires user interaction; a victim must open a specially crafted file. Conne...

CVE-2024-39382

CVE-2024-39382 affects Adobe After Effects versions 23.6.6, 24.5 and earlier. The issue is an out-of-bounds read that can disclose sensitive memory and could enable bypassing mitigations such as ASLR. Exploitation requires user interaction (the victim must open a malicious file). The vulnerabilit...

CVE-2026-34642

After Effects vulnerability CVE-2026-34642 is a heap-based buffer overflow affecting After Effects versions 26.0, 25.6.4 and earlier. The issue can lead to arbitrary code execution in the context of the current user and requires user interaction (victim opens a malicious file). Root cause is a he...

CVE-2025-54239

CVE-2025-54239 affects Adobe After Effects versions 25.3, 24.6.7 and earlier. The issue is an out-of-bounds read that can lead to memory exposure and potential disclosure of sensitive information. Exploitation requires a user to open a malicious file (no exploit via remote vector reported). Adobe...

CVE-2026-21318

CVE-2026-21318 affects After Effects versions 25.6 and earlier. The issue is an out-of-bounds write leading to arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically the victim opening a malicious file. CVSSv3.1 base score 7.8 (HIGH) with...

CVE-2026-34643

CVE-2026-34643 affects Adobe After Effects versions 26.0, 25.6.4 and earlier with an out-of-bounds write (CWE-787) that could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. The entry provides CVSS ...

CVE-2026-34644

CVE-2026-34644 affects Adobe After Effects: vulnerable in versions 26.0, 25.6.4 and earlier due to an Integer Overflow or Wraparound (CWE-190) that could lead to arbitrary code execution in the user context. Exploitation requires user interaction—victim must open a malicious file. The entry provi...

CVE-2025-54241

CVE-2025-54241 concerns Adobe After Effects, where versions 25.3, 24.6.7 and earlier are affected by an out-of-bounds read vulnerability that may cause memory exposure and leak sensitive data. Exploitation requires user interaction: a victim must open a malicious file. The issue is documented acr...

CVE-2026-21327

CVE-2026-21327 affects After Effects versions 25.6 and earlier. It is an out-of-bounds write vulnerability that could allow arbitrary code execution in the context of the current user when a victim opens a malicious file. Exploitation requires user interaction (UI: Required) and is a local vector...

CVE-2026-21325

CVE-2026-21325 affects After Effects versions 25.6 and earlier. It is an out-of-bounds read vulnerability triggered while parsing a crafted file, potentially allowing code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. ...

CVE-2026-34690

The CVE-2026-34690 entry describes a Stack-based Buffer Overflow in Adobe After Effects Versions 26.0, 25.6.4 and earlier that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). No concrete remediation d...

CVE-2025-43587

CVE-2025-43587 affects Adobe After Effects up to versions 25.2, 24.6.6 and earlier. The issue is an out-of-bounds read in After Effects components that can disclose memory contents and potentially bypass mitigations such as ASLR. Exploitation requires user interaction: a victim must open a malici...

CVE-2025-47109

CVE-2025-47109 refers to a NULL Pointer Dereference in Adobe After Effects versions 25.2, 24.6.6 and earlier, which can cause an application denial-of-service. The issue can be exploited when a user opens a malicious file, requiring user interaction. The connected documents indicate this vulnerab...

CVE-2026-21320

Adobe After Effects up to version 25.6 is affected by a Use-After-Free vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a crafted malicious file. CVSS: 3.1, base score 7.8 (HIGH), with LOCAL atta...

CVE-2026-21326

CVE-2026-21326 affects After Effects versions 25.6 and earlier and is a Use-After-Free vulnerability that could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). The provided documents do not list a fixe...

CVE-2026-21322

CVE-2026-21322 involves an out-of-bounds read in Adobe After Effects up to version 25.6 when parsing a crafted file, potentially allowing code execution in the user’s context. The vulnerability requires user interaction (victim must open a malicious file) and has a High impact across confidential...

CVE-2026-21329

CVE-2026-21329 affects After Effects versions 25.6 and earlier. It is a Use After Free vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically the victim must open a malicious file. No additional details on...

CVE-2025-54240

CVE-2025-54240 affects Adobe After Effects versions 25.3, 24.6.7 and earlier, due to an out-of-bounds read that can lead to memory exposure and potential disclosure of sensitive information. The vulnerability requires user interaction (victim must open a malicious file). Connected sources corrobo...

CVE-2026-21321

CVE-2026-21321 affects Adobe After Effects up to version 25.6. The issue is an integer overflow/wraparound in a component used during file parsing, leading to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a specially crafte...

CVE-2026-21350

CVE-2026-21350 affects Adobe After Effects, versions 25.6 and earlier, due to a NULL Pointer Dereference that can crash the application and cause a denial-of-service. The issue requires user interaction: a victim must open a malicious file, and exploitation is indicated as a local vector with low...

CVE-2026-21324

CVE-2026-21324 affects Adobe After Effects versions 25.6 and earlier. It is an out-of-bounds read vulnerability that occurs while parsing a crafted file, potentially allowing code execution in the current user’s context. Exploitation requires user interaction, with a victim opening a malicious fi...

CVE-2026-21328

After Effects versions 25.6 and earlier are affected by an out-of-bounds write that could enable arbitrary code execution in the current user context. Exploitation requires user interaction (victim must open a malicious file). CVSS v3.1 base score 7.8 (HIGH); attack vector LOCAL, attack complexit...

CVE-2026-21330

CVE-2026-21330 affects After Effects versions 25.6 and earlier, with a Type Confusion vulnerability (Access of Resource Using Incompatible Type) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). ...

CVE-2026-21351

After Effects 25.6 and earlier are affected by a use-after-free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (the victim must open a malicious file). CVSS:3.1 base score 7.8 (HIGH), attack vector LOCAL, attack c...

CVE-2026-21323

CVE-2026-21323 affects Adobe After Effects up to version 25.6 (and earlier). It describes a Use-After-Free vulnerability in the vulnerable components that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a mali...

CVE-2026-21319

CVE-2026-21319 describes an Out-of-bounds Read in After Effects versions 25.6 and earlier that could lead to memory exposure. The vulnerability could allow an attacker to access sensitive information stored in memory. Exploitation requires user interaction: a victim must open a malicious file. CV...