CVE-2025-49561

CVE-2025-49561 affects Adobe Animate versions 23.0.12, 24.0.9 and earlier with a Use-After-Free vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. Affected software: Animate; root cause: Use-After-...

CVE-2025-49562

Adobe Animate is affected by a Use After Free vulnerability (CWE-416) in versions 23.0.12, 24.0.9 and earlier. The issue could disclose sensitive memory and requires user interaction (victim must open a malicious file) to exploit. Affected components are the Animate application as shipped in thos...

CVE-2025-54270

Adobe Animate versions 23.0.13, 24.0.10 and earlier are affected by a NULL Pointer Dereference vulnerability that can lead to memory exposure; exploitation requires a user to open a malicious file. The issue is documented across multiple feeds (NVD/Red Hat/CNVD/EUVD) and is addressed by APSB25-97...

CVE-2026-48349

CVE-2026-48349 (Animate) is an Incorrect Authorization vulnerability (CWE-863) that could allow arbitrary code execution in the context of the current user. Exploitation does not require user interaction, but depends on conditions beyond the attacker’s control. The CVSSv3.1 base score is 8.1 (HIG...

CVE-2026-48345

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2025-61804

Adobe Animate is affected by a heap-based buffer overflow (CWE-122) in versions 23.0.13, 24.0.10 and earlier, enabling arbitrary code execution in the user’s context when a victim opens a malicious file. The issue requires user interaction. Remediation: update to fixed versions 23.0.15 or 24.0.12...

CVE-2025-54269

CVE-2025-54269 : Adobe Animate (versions 23.0.13, 24.0.10 and earlier) is affected by an out-of-bounds read vulnerability that can disclose memory contents. The issue is triggered by a user opening a malicious file, enabling memory exposure as described in multiple sources. Connected documents co...

CVE-2026-48348

Animate is affected by an Incorrect Authorization (CWE-863) vulnerability that could lead to arbitrary code execution in the context of the current user. The exploit depends on conditions beyond the attacker’s control and requires user interaction (the victim must open a malicious file). The CVE ...

CVE-2026-76191

Adobe Animate is affected by a Code Injection (CWE-94) vulnerability that can lead to arbitrary code execution in the context of the current user. A low-privileged attacker can exploit this by persuading a victim to open a malicious file , making user interaction required. The scope is changed , ...