CVE-2020-9748

Adobe Animate CVE-2020-9748 is a stack overflow vulnerability in Adobe Animate 20.5 and earlier. Exploitation requires the user to open a crafted .fla file, enabling arbitrary code execution in the current user context. In Nessus/NVD entries, this class of issue is grouped with APSB20-61, which d...

CVE-2021-21008

CVE-2021-21008 affects Adobe Animate 21.0 and earlier, due to an uncontrolled search path element that could lead to arbitrary code execution in the user’s context. Exploitation requires user interaction (opening a malicious file). The connected advisories indicate a patch is available (APSB21-03...

CVE-2021-21074

Adobe Animate vulnerability CVE-2021-21074 affects Adobe Animate 21.0.3 and earlier. The issue is an Out-of-bounds Read that could disclose sensitive information in the context of the current user. Exploitation requires user interaction—victims must open a malicious file. Remediation is reference...

CVE-2021-28574

Adobe Animate 21.0.5 (and earlier) is affected by CVE-2021-28574: an Out-of-bounds Read when parsing a specially crafted file, enabling information disclosure in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected product/version: Adob...

CVE-2021-42266

Summary: CVE-2021-42266 affects Adobe Animate 21.0.9 and earlier, via memory corruption when processing a malicious FLA file. This could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (the victim must open a crafted file). The vulnerabi...

CVE-2021-21076

CVE-2021-21076 affects Adobe Animate 21.0.3 and earlier with an Out-of-bounds Read leading to potential information disclosure. Exploitation requires user interaction (victim opens a malicious file). Connected sources (APSB21-21) indicate a remediation/update is available; Adobe lists this as a p...

CVE-2021-42271

CVE-2021-42271 affects Adobe Animate 21.0.9 and earlier. It covers an out-of-bounds write that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious BMP file. The issue is documented in Adobe’s APSB21-105 ...

CVE-2024-20796

Adobe Animate (Windows/macOS) versions 23.0.4, 24.0.1 and earlier are affected by an out-of-bounds read that can disclose memory contents. Exploitation requires user interaction (victim opens a malicious file). The issue is listed as CVE-2024-20796. Adobe APSB24-26 and related advisories indicate...

CVE-2024-30295

CVE-2024-30295 affects Adobe Animate versions 24.0.2, 23.0.5 and earlier due to a NULL Pointer Dereference, enabling arbitrary code execution in the current user context. Exploitation requires user interaction (opening a malicious file). Mitigation: apply APSB24-36 updates—Animate 23.0.6 and 24.0...

CVE-2025-43555

Adobe Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability (CVE-2025-43555) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). The issue is...

CVE-2021-21052

Adobe Animate 21.0.2 and earlier is affected by an Out-of-bounds Write vulnerability (CVE-2021-21052) that could enable arbitrary code execution in the context of the current user. An unauthenticated attacker would need the victim to open a malicious file, and exploitation requires user interacti...

CVE-2021-42272

Adobe Animate is affected by CVE-2021-42272: an out-of-bounds write in parsing a GIF file in versions 21.0.9 and earlier, allowing arbitrary code execution in the context of the current user and requiring user interaction (victim opens a malicious GIF). A patch is available via APSB21-105; remedi...

CVE-2024-30294

Adobe Animate is affected by CVE-2024-30294: a heap-based buffer overflow in OGG/file parsing that can allow arbitrary code execution under the current user. Affected versions: 24.0.2, 23.0.5 and earlier. Exploitation requires the user to open a malicious file; no exploit details are provided in ...

CVE-2021-42269

CVE-2021-42269 affects Adobe Animate 21.0.9 and earlier, with a use-after-free in parsing a malformed FLA file that can lead to arbitrary code execution. Exploitation requires user interaction (victim opens a malicious file). Connected sources confirm this mapping and note patches via APSB21-105,...

CVE-2024-30297

CVE-2024-30297 affects Adobe Animate (versions 24.0.2, 23.0.5 and earlier). The flaw is an out-of-bounds write that could allow arbitrary code execution in the context of the current user; exploitation requires the user to open a malicious file. Remediation: Adobe released updates resolving these...

CVE-2024-52982

Adobe Animate (versions 23.0.8, 24.0.5 and earlier) is affected by an Improper Input Validation vulnerability (CVE-2024-52982) that could allow arbitrary code execution in the context of the current user, requiring the user to open a malicious file. Connected sources confirm the issue and that up...

CVE-2024-52988

CVE-2024-52988 – Adobe Animate is affected by an out-of-bounds write vulnerability that can lead to arbitrary code execution in the context of the current user. Affected products/versions: Animate 23.0.8, 24.0.5 and earlier. Root cause per sources: out-of-bounds write in the application; exploita...

CVE-2021-28620

Adobe Animate 21.x versions prior to 21.0.7 (including 21.0.6 and earlier) are affected by CVE-2021-28620, a heap-based buffer overflow that could allow arbitrary code execution in the context of the current user. Exploitation requires the victim to open a malicious file (user interaction). Remed...

CVE-2021-28629

Adobe Animate is affected in versions prior to 21.0.7 (notably 21.0.6 and earlier) by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could trigger arbitrary code execution in the context of the current user, but exploitation requires the user to open a malicious file. The...

CVE-2024-47412

CVE-2024-47412 affects Adobe Animate versions 23.0.7, 24.0.4 and earlier, due to a Use After Free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). The issue is one of multiple vu...

CVE-2021-21072

CVE-2021-21072 affects Adobe Animate 21.0.3 and earlier. It is an Out-of-bounds Read vulnerability that could disclose sensitive information in the context of the current user. Exploitation requires user interaction: a victim must open a specially crafted malicious file. The connected documents c...

CVE-2021-28573

Adobe Animate 21.0.5 and earlier is affected by CVE-2021-28573 (out-of-bounds read) when parsing a specially crafted file. An attacker could disclose information in the context of the current user, and exploitation requires the victim to open a malicious file. The issue is mitigated by updating t...

CVE-2023-22243

Adobe Animate is affected by a Stack-based Buffer Overflow (CVE-2023-22243) that can lead to arbitrary code execution in the context of the current user. Affected versions: 22.0.8 and earlier, and 23.0.0 and earlier. Exploitation requires user interaction (victim must open a malicious file). Root...

CVE-2024-47414

CVE-2024-47414 affects Adobe Animate versions 23.0.7, 24.0.4 and earlier with a Use After Free vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). The issue is one of multiple vulnerabi...

CVE-2024-47416

Adobe Animate is affected by CVE-2024-47416: an Integer Overflow or Wraparound in Animate versions 23.0.7, 24.0.4 and earlier that could lead to arbitrary code execution in the context of the current user. Exploitation requires a user to open a malicious file. Remediation is to update to non‑affe...

CVE-2024-53953

CVE-2024-53953 (Adobe Animate) is a Use After Free vulnerability in Animate versions 23.0.8, 24.0.5 and earlier that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Affected components are the Animate runt...

CVE-2025-43556

CVE-2025-43556 concerns Adobe Animate versions 24.0.8, 23.0.11 and earlier. The issue is an Integer Overflow or Wraparound that can lead to arbitrary code execution in the user’s context; exploitation requires the user to open a malicious file. Connected sources corroborate affected versions and ...

CVE-2021-42525

Adobe Animate CVE-2021-42525 describes an out-of-bounds read in SVG parsing affecting 21.0.9 and earlier, enabling information disclosure of memory and the bypass of ASLR. Exploitation requires user interaction (victim opens a malicious file). Malware rumors in connected records confirm this clas...

CVE-2024-45156

CVE-2024-45156 affects Adobe Animate 23.0.8, 24.0.5 and earlier with a NULL pointer dereference that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Affected products and versions are confirmed ac...

CVE-2024-47411

Adobe Animate versions 23.0.7, 24.0.4 and earlier are affected by CVE-2024-47411 (Access of Uninitialized Pointer), which could allow arbitrary code execution in the context of the current user. The vulnerability requires user interaction, as a victim must open a malicious file. The root cause is...

CVE-2024-47417

CVE-2024-47417 affects Adobe Animate versions 23.0.7, 24.0.4 and earlier. The issue is a heap-based buffer overflow in Animate that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (the victim must open a malicious file). The CVSS v...

CVE-2024-49528

Adobe Animate is affected by an out-of-bounds write vulnerability (CWE-787) in versions 23.0.7, 24.0.4 and earlier, potentially allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Affected products/vers...

CVE-2021-28575

CVE-2021-28575 affects Adobe Animate 21.0.5 and earlier. The issue is an out-of-bounds read when parsing a specially crafted file, allowing information disclosure in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). The vulnerability is a...

CVE-2024-47418

Adobe Animate is affected by CVE-2024-47418 (and related CVEs) across versions 23.0.7, 24.0.4 and earlier. The issue is a Use After Free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). R...

CVE-2021-42268

Adobe Animate is affected by CVE-2021-42268: a null pointer dereference in the parser of specially crafted FLA files, enabling a denial-of-service in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Affected version: 21.0.9 and earlier. ...

CVE-2024-45155

Adobe Animate is affected by an Access of Uninitialized Pointer vulnerability (CVE-2024-45155) in versions 23.0.8, 24.0.5 and earlier, allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Remediation: update to th...

CVE-2024-47413

CVE-2024-47413 affects Adobe Animate 23.x < 23.0.8 and 24.x

CVE-2021-28576

CVE-2021-28576 affects Adobe Animate 21.0.5 and earlier. Out-of-bounds read during parsing of a crafted file can disclose partial information to an attacker. Exploitation requires a user to open a malicious file. Remediation per APSB21-35 is to update to a fixed build (e.g., 21.0.6 or 20.5.2).

CVE-2024-49526

CVE-2024-49526 affects Adobe Animate versions 23.0.7, 24.0.4 and earlier. The issue is a Use-After-Free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The CVE is associated wi...

CVE-2024-47420

Adobe Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). According to the sources, APSB24-76 provides a security update addressing these...

CVE-2024-47419

CVE-2024-47419 pertains to Adobe Animate. Affected products: Animate 23.x before 23.0.8 and 24.x before 24.0.5. The issue is an out-of-bounds read that can disclose sensitive memory and potentially bypass mitigations like ASLR. Exploitation requires user interaction (victim must open a malicious ...

CVE-2025-27202

CVE-2025-27202 affects Adobe Animate. Affected are Animate versions 24.0.7, 23.0.10 and earlier, with an out-of-bounds read that can disclose memory and potentially bypass ASLR. Exploitation requires user interaction: a victim must open a malicious file. The issue is caused by an out-of-bounds re...

CVE-2025-27200

CVE-2025-27200 affects Adobe Animate when running versions 24.0.7, 23.0.10 and earlier. The issue is a Use After Free (CWE-416) that could allow arbitrary code execution in the context of the current user, with exploitation requiring the user to open a malicious file (user interaction). The vulne...

CVE-2024-49527

Adobe Animate CVE-2024-49527 is an out-of-bounds read in versions 23.0.7, 24.0.4 and earlier that can disclose memory and bypass ASLR. Exploitation requires a user to open a malicious file; attack vector is local. Remediation per APSB24-76 is updating to 23.0.8 or 24.0.5 (or newer).

CVE-2025-30328

Adobe Animate versions 24.0.8, 23.0.11 and earlier are affected by an out-of-bounds write vulnerability (CVE-2025-30328) that could allow arbitrary code execution in the context of the current user; exploitation requires a victim to open a malicious file. Multiple connected sources (NVD, CVE list...

CVE-2025-30329

CVE-2025-30329 (Adobe Animate) affects Animate versions 24.0.8, 23.0.11 and earlier with a NULL pointer dereference that can cause application denial-of-service. Exploitation requires user interaction (victim opens a malicious file). The issue is confirmed across public CVE records and vendor adv...

CVE-2026-48350

CVE-2026-48350 affects Adobe Animate with a Path Traversal vulnerability that can lead to arbitrary code execution in the context of the current user. An attacker could access sensitive files/directories outside the intended restrictions. Exploitation requires user interaction (victim opens a mal...

CVE-2026-48345

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-48346

Summary (CVE-2026-48346): Animate is affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The affected scope has changed. The CVSS vector indi...

CVE-2025-49562

Adobe Animate is affected by a Use After Free vulnerability (CWE-416) in versions 23.0.12, 24.0.9 and earlier. The issue could disclose sensitive memory and requires user interaction (victim must open a malicious file) to exploit. Affected components are the Animate application as shipped in thos...