CVE-2025-49561

CVE-2025-49561 affects Adobe Animate versions 23.0.12, 24.0.9 and earlier with a Use-After-Free vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. Affected software: Animate; root cause: Use-After-...

CVE-2025-54279

CVE-2025-54279 affects Adobe Animate versions 23.0.13, 24.0.10 and earlier with a Use After Free vulnerability that could lead to arbitrary code execution in the current user context. Exploitation requires user interaction (victim opens a malicious file). The issue is supported by multiple source...

CVE-2026-48347

Animate is affected by an OS Command Injection (CWE-78) due to improper neutralization of special elements in an input that is used in an OS command. This can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malici...

CVE-2025-54270

Adobe Animate versions 23.0.13, 24.0.10 and earlier are affected by a NULL Pointer Dereference vulnerability that can lead to memory exposure; exploitation requires a user to open a malicious file. The issue is documented across multiple feeds (NVD/Red Hat/CNVD/EUVD) and is addressed by APSB25-97...

CVE-2025-61804

Adobe Animate is affected by a heap-based buffer overflow (CWE-122) in versions 23.0.13, 24.0.10 and earlier, enabling arbitrary code execution in the user’s context when a victim opens a malicious file. The issue requires user interaction. Remediation: update to fixed versions 23.0.15 or 24.0.12...

CVE-2026-48349

CVE-2026-48349 (Animate) is an Incorrect Authorization vulnerability (CWE-863) that could allow arbitrary code execution in the context of the current user. Exploitation does not require user interaction, but depends on conditions beyond the attacker’s control. The CVSSv3.1 base score is 8.1 (HIG...

CVE-2026-48348

Animate is affected by an Incorrect Authorization (CWE-863) vulnerability that could lead to arbitrary code execution in the context of the current user. The exploit depends on conditions beyond the attacker’s control and requires user interaction (the victim must open a malicious file). The CVE ...

CVE-2025-54269

CVE-2025-54269 : Adobe Animate (versions 23.0.13, 24.0.10 and earlier) is affected by an out-of-bounds read vulnerability that can disclose memory contents. The issue is triggered by a user opening a malicious file, enabling memory exposure as described in multiple sources. Connected documents co...