CVE-2026-21323CWE-416

CVE-2026-21323

High · published February 10, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
16.3
In the wild
Unconfirmed
What it is

⚡ Just opening a single malicious file in After Effects could trigger this nasty Use After Free vulnerability! 🎨💥 Think of this like a restaurant that allows you to place an order, but if you choose the wrong dish, it serves an unexpected surprise instead — and you’re stuck eating it! That's exactly how this bug works; it lets attackers serve up arbitrary code when you least expect it. If exploited, this vulnerability could allow an attacker to run malicous code on your machine, potentially leading to data theft, system compromise, or worse! It’s like letting a stranger take control of your computer just by clicking a link — absolutely terrifying!

Put simply

Think of this like a restaurant that allows you to place an order, but if you choose the wrong dish, it serves an unexpected surprise instead — and you’re stuck eating it! That's exactly how this bug works; it lets attackers serve up arbitrary code when you least expect it. This Use After Free vulnerability in After Effects versions 25.6 and earlier occurs when the program improperly manages memory after releasing it, allowing attackers to execute arbitrary code in the context of the current user.

What to do

If exploited, this vulnerability could allow an attacker to run malicous code on your machine, potentially leading to data theft, system compromise, or worse! It’s like letting a stranger take control of your computer just by clicking a link — absolutely terrifying! To safeguard your system, upgrade to After Effects version 25.7 or later immediately. Additionally, be cautious about opening any files from untrusted sources; ensure robust antivirus protections are in place as a precaution. You've got this! Follow these steps, and you'll be far more secure in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00256 · 16.3th percentile
Weakness
CWE-416 · Use After Free
Published
2026-02-10T23:16Z
Affected products (1)
ProductVersionsFixed in
adobe/after_effects< 25.6.425.6.4
References (1)
EPSS history
Timeline
  • 10 FEB 17:53Z
    After Effects | Use After Free (CWE-416)
    cvelistv5