CVE-2026-34640

Media Encoder CVE-2026-34640 affects versions 26.0.2, 25.6.4 and earlier with an Integer Overflow or Wraparound (CWE-190). The issue could allow arbitrary code execution in the context of the current user and requires user interaction (victim must open a malicious file). These details confirm the...

CVE-2026-34639

CVE-2026-34639 affects Adobe Media Encoder versions 26.0.2, 25.6.4 and earlier. It is an out-of-bounds write (CWE-787) vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The ava...

CVE-2026-47971

Media Encoder is affected by a Stack-based Buffer Overflow (CWE-121) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The CVE entry provides no vendor-specific patch details in the connecte...

CVE-2026-47976

CVE-2026-47976 affects Media Encoder with an out-of-bounds write (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). The connected documents provide the same details and do not specify af...

CVE-2026-47979

Media Encoder is affected by an out-of-bounds read vulnerability (CWE-125) that could disclose sensitive memory. Exploitation requires user interaction: the victim must open a malicious file. CVSSv3.1 base score is 5.5 (Medium) with LOCAL attack vector, low complexity, no privileges required, and...

CVE-2026-48366

CVE-2026-48366 affects Media Encoder and is described as an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user. The description specifies local exploitability with user interaction required (a victim must open a malicious file). Connected do...

CVE-2026-48370

CVE-2026-48370 affects Media Encoder with an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. CVSSv3.1 base score 7.8 (High); vectors: Local, Privileges Requir...