CVE-2021-42271

CVE-2021-42271 affects Adobe Animate 21.0.9 and earlier. It covers an out-of-bounds write that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious BMP file. The issue is documented in Adobe’s APSB21-105 ...

CVE-2024-20796

Adobe Animate (Windows/macOS) versions 23.0.4, 24.0.1 and earlier are affected by an out-of-bounds read that can disclose memory contents. Exploitation requires user interaction (victim opens a malicious file). The issue is listed as CVE-2024-20796. Adobe APSB24-26 and related advisories indicate...

CVE-2024-53954

CVE-2024-53954 affects Adobe Animate versions 23.0.8, 24.0.5 and earlier. The issue is an Integer Underflow (Wrap or Wraparound) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Remediation is p...

CVE-2021-21074

Adobe Animate vulnerability CVE-2021-21074 affects Adobe Animate 21.0.3 and earlier. The issue is an Out-of-bounds Read that could disclose sensitive information in the context of the current user. Exploitation requires user interaction—victims must open a malicious file. Remediation is reference...

CVE-2022-38411

Adobe Animate versions 21.0.11 and earlier, and 22.0.7 and earlier, are affected by a heap-based buffer overflow that could allow arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. Remediation per APSB22-54 is to update to 21.0.12...

CVE-2021-21008

CVE-2021-21008 affects Adobe Animate 21.0 and earlier, due to an uncontrolled search path element that could lead to arbitrary code execution in the user’s context. Exploitation requires user interaction (opening a malicious file). The connected advisories indicate a patch is available (APSB21-03...

CVE-2021-28574

Adobe Animate 21.0.5 (and earlier) is affected by CVE-2021-28574: an Out-of-bounds Read when parsing a specially crafted file, enabling information disclosure in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected product/version: Adob...

CVE-2021-28629

Adobe Animate is affected in versions prior to 21.0.7 (notably 21.0.6 and earlier) by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could trigger arbitrary code execution in the context of the current user, but exploitation requires the user to open a malicious file. The...

CVE-2024-30294

Adobe Animate is affected by CVE-2024-30294: a heap-based buffer overflow in OGG/file parsing that can allow arbitrary code execution under the current user. Affected versions: 24.0.2, 23.0.5 and earlier. Exploitation requires the user to open a malicious file; no exploit details are provided in ...

CVE-2024-30295

CVE-2024-30295 affects Adobe Animate versions 24.0.2, 23.0.5 and earlier due to a NULL Pointer Dereference, enabling arbitrary code execution in the current user context. Exploitation requires user interaction (opening a malicious file). Mitigation: apply APSB24-36 updates—Animate 23.0.6 and 24.0...

CVE-2024-52988

CVE-2024-52988 – Adobe Animate is affected by an out-of-bounds write vulnerability that can lead to arbitrary code execution in the context of the current user. Affected products/versions: Animate 23.0.8, 24.0.5 and earlier. Root cause per sources: out-of-bounds write in the application; exploita...

CVE-2024-53953

CVE-2024-53953 (Adobe Animate) is a Use After Free vulnerability in Animate versions 23.0.8, 24.0.5 and earlier that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Affected components are the Animate runt...

CVE-2020-9748

Adobe Animate CVE-2020-9748 is a stack overflow vulnerability in Adobe Animate 20.5 and earlier. Exploitation requires the user to open a crafted .fla file, enabling arbitrary code execution in the current user context. In Nessus/NVD entries, this class of issue is grouped with APSB20-61, which d...

CVE-2021-21072

CVE-2021-21072 affects Adobe Animate 21.0.3 and earlier. It is an Out-of-bounds Read vulnerability that could disclose sensitive information in the context of the current user. Exploitation requires user interaction: a victim must open a specially crafted malicious file. The connected documents c...

CVE-2021-28620

Adobe Animate 21.x versions prior to 21.0.7 (including 21.0.6 and earlier) are affected by CVE-2021-28620, a heap-based buffer overflow that could allow arbitrary code execution in the context of the current user. Exploitation requires the victim to open a malicious file (user interaction). Remed...

CVE-2024-30297

CVE-2024-30297 affects Adobe Animate (versions 24.0.2, 23.0.5 and earlier). The flaw is an out-of-bounds write that could allow arbitrary code execution in the context of the current user; exploitation requires the user to open a malicious file. Remediation: Adobe released updates resolving these...

CVE-2024-52982

Adobe Animate (versions 23.0.8, 24.0.5 and earlier) is affected by an Improper Input Validation vulnerability (CVE-2024-52982) that could allow arbitrary code execution in the context of the current user, requiring the user to open a malicious file. Connected sources confirm the issue and that up...

CVE-2021-21052

Adobe Animate 21.0.2 and earlier is affected by an Out-of-bounds Write vulnerability (CVE-2021-21052) that could enable arbitrary code execution in the context of the current user. An unauthenticated attacker would need the victim to open a malicious file, and exploitation requires user interacti...

CVE-2024-47411

Adobe Animate versions 23.0.7, 24.0.4 and earlier are affected by CVE-2024-47411 (Access of Uninitialized Pointer), which could allow arbitrary code execution in the context of the current user. The vulnerability requires user interaction, as a victim must open a malicious file. The root cause is...

CVE-2024-47412

CVE-2024-47412 affects Adobe Animate versions 23.0.7, 24.0.4 and earlier, due to a Use After Free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). The issue is one of multiple vu...

CVE-2025-43557

CVE-2025-43557 affects Adobe Animate versions 24.0.8, 23.0.11 and earlier with an Access of Uninitialized Pointer that could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Confirmed fixes are available in...

CVE-2021-42269

CVE-2021-42269 affects Adobe Animate 21.0.9 and earlier, with a use-after-free in parsing a malformed FLA file that can lead to arbitrary code execution. Exploitation requires user interaction (victim opens a malicious file). Connected sources confirm this mapping and note patches via APSB21-105,...

CVE-2025-43556

CVE-2025-43556 concerns Adobe Animate versions 24.0.8, 23.0.11 and earlier. The issue is an Integer Overflow or Wraparound that can lead to arbitrary code execution in the user’s context; exploitation requires the user to open a malicious file. Connected sources corroborate affected versions and ...

CVE-2021-42525

Adobe Animate CVE-2021-42525 describes an out-of-bounds read in SVG parsing affecting 21.0.9 and earlier, enabling information disclosure of memory and the bypass of ASLR. Exploitation requires user interaction (victim opens a malicious file). Malware rumors in connected records confirm this clas...

CVE-2023-22243

Adobe Animate is affected by a Stack-based Buffer Overflow (CVE-2023-22243) that can lead to arbitrary code execution in the context of the current user. Affected versions: 22.0.8 and earlier, and 23.0.0 and earlier. Exploitation requires user interaction (victim must open a malicious file). Root...

CVE-2024-45156

CVE-2024-45156 affects Adobe Animate 23.0.8, 24.0.5 and earlier with a NULL pointer dereference that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Affected products and versions are confirmed ac...

CVE-2024-47416

Adobe Animate is affected by CVE-2024-47416: an Integer Overflow or Wraparound in Animate versions 23.0.7, 24.0.4 and earlier that could lead to arbitrary code execution in the context of the current user. Exploitation requires a user to open a malicious file. Remediation is to update to non‑affe...

CVE-2021-28573

Adobe Animate 21.0.5 and earlier is affected by CVE-2021-28573 (out-of-bounds read) when parsing a specially crafted file. An attacker could disclose information in the context of the current user, and exploitation requires the victim to open a malicious file. The issue is mitigated by updating t...

CVE-2024-47417

CVE-2024-47417 affects Adobe Animate versions 23.0.7, 24.0.4 and earlier. The issue is a heap-based buffer overflow in Animate that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (the victim must open a malicious file). The CVSS v...

CVE-2024-47418

Adobe Animate is affected by CVE-2024-47418 (and related CVEs) across versions 23.0.7, 24.0.4 and earlier. The issue is a Use After Free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). R...

CVE-2021-28575

CVE-2021-28575 affects Adobe Animate 21.0.5 and earlier. The issue is an out-of-bounds read when parsing a specially crafted file, allowing information disclosure in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). The vulnerability is a...

CVE-2025-43555

Adobe Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability (CVE-2025-43555) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). The issue is...

CVE-2021-42268

Adobe Animate is affected by CVE-2021-42268: a null pointer dereference in the parser of specially crafted FLA files, enabling a denial-of-service in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Affected version: 21.0.9 and earlier. ...

CVE-2024-45155

Adobe Animate is affected by an Access of Uninitialized Pointer vulnerability (CVE-2024-45155) in versions 23.0.8, 24.0.5 and earlier, allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). Remediation: update to th...

CVE-2024-47413

CVE-2024-47413 affects Adobe Animate 23.x < 23.0.8 and 24.x

CVE-2024-47414

CVE-2024-47414 affects Adobe Animate versions 23.0.7, 24.0.4 and earlier with a Use After Free vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). The issue is one of multiple vulnerabi...

CVE-2024-49526

CVE-2024-49526 affects Adobe Animate versions 23.0.7, 24.0.4 and earlier. The issue is a Use-After-Free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The CVE is associated wi...

CVE-2024-49528

Adobe Animate is affected by an out-of-bounds write vulnerability (CWE-787) in versions 23.0.7, 24.0.4 and earlier, potentially allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Affected products/vers...

CVE-2024-47419

CVE-2024-47419 pertains to Adobe Animate. Affected products: Animate 23.x before 23.0.8 and 24.x before 24.0.5. The issue is an out-of-bounds read that can disclose sensitive memory and potentially bypass mitigations like ASLR. Exploitation requires user interaction (victim must open a malicious ...

CVE-2025-27200

CVE-2025-27200 affects Adobe Animate when running versions 24.0.7, 23.0.10 and earlier. The issue is a Use After Free (CWE-416) that could allow arbitrary code execution in the context of the current user, with exploitation requiring the user to open a malicious file (user interaction). The vulne...

CVE-2021-28576

CVE-2021-28576 affects Adobe Animate 21.0.5 and earlier. Out-of-bounds read during parsing of a crafted file can disclose partial information to an attacker. Exploitation requires a user to open a malicious file. Remediation per APSB21-35 is to update to a fixed build (e.g., 21.0.6 or 20.5.2).

CVE-2024-47420

Adobe Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). According to the sources, APSB24-76 provides a security update addressing these...

CVE-2025-27202

CVE-2025-27202 affects Adobe Animate. Affected are Animate versions 24.0.7, 23.0.10 and earlier, with an out-of-bounds read that can disclose memory and potentially bypass ASLR. Exploitation requires user interaction: a victim must open a malicious file. The issue is caused by an out-of-bounds re...

CVE-2024-49527

Adobe Animate CVE-2024-49527 is an out-of-bounds read in versions 23.0.7, 24.0.4 and earlier that can disclose memory and bypass ASLR. Exploitation requires a user to open a malicious file; attack vector is local. Remediation per APSB24-76 is updating to 23.0.8 or 24.0.5 (or newer).

CVE-2025-30329

CVE-2025-30329 (Adobe Animate) affects Animate versions 24.0.8, 23.0.11 and earlier with a NULL pointer dereference that can cause application denial-of-service. Exploitation requires user interaction (victim opens a malicious file). The issue is confirmed across public CVE records and vendor adv...

CVE-2025-30328

Adobe Animate versions 24.0.8, 23.0.11 and earlier are affected by an out-of-bounds write vulnerability (CVE-2025-30328) that could allow arbitrary code execution in the context of the current user; exploitation requires a victim to open a malicious file. Multiple connected sources (NVD, CVE list...

CVE-2025-49562

Adobe Animate is affected by a Use After Free vulnerability (CWE-416) in versions 23.0.12, 24.0.9 and earlier. The issue could disclose sensitive memory and requires user interaction (victim must open a malicious file) to exploit. Affected components are the Animate application as shipped in thos...

CVE-2025-49561

CVE-2025-49561 affects Adobe Animate versions 23.0.12, 24.0.9 and earlier with a Use-After-Free vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. Affected software: Animate; root cause: Use-After-...

CVE-2025-54279

CVE-2025-54279 affects Adobe Animate versions 23.0.13, 24.0.10 and earlier with a Use After Free vulnerability that could lead to arbitrary code execution in the current user context. Exploitation requires user interaction (victim opens a malicious file). The issue is supported by multiple source...

CVE-2025-61804

Adobe Animate is affected by a heap-based buffer overflow (CWE-122) in versions 23.0.13, 24.0.10 and earlier, enabling arbitrary code execution in the user’s context when a victim opens a malicious file. The issue requires user interaction. Remediation: update to fixed versions 23.0.15 or 24.0.12...