CVE-2026-21327CWE-787

CVE-2026-21327

High · published February 10, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
11.3
In the wild
Unconfirmed
What it is

⚡ Just opening a malicious file is all it takes for an attacker to exploit this vulnerability in After Effects! 🚨 Think of it like a surprise package on your doorstep that, once opened, spills a secret recipe all over your kitchen — you thought you were just getting a new blender! If exploited, this vulnerability allows malicious code to run in the context of the current user, potentially leading to severe consequences like data theft or compromising your entire system. It's like inviting a stranger into your home who then takes control of everything!

Put simply

Think of it like a surprise package on your doorstep that, once opened, spills a secret recipe all over your kitchen — you thought you were just getting a new blender! This out-of-bounds write vulnerability in After Effects allows attackers to execute arbitrary code by manipulating memory, but it requires the user to interact with a crafted file that triggers the flaw.

What to do

If exploited, this vulnerability allows malicious code to run in the context of the current user, potentially leading to severe consequences like data theft or compromising your entire system. It's like inviting a stranger into your home who then takes control of everything! To protect yourself, update After Effects to version 25.7 or later immediately. Also, consider implementing strict policies on opening files from untrusted sources. You've got this! Stay vigilant and keep your software updated to protect against vulnerabilities like this! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00215 · 11.3th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-02-10T23:16Z
Affected products (1)
ProductVersionsFixed in
adobe/after_effects< 25.6.425.6.4
References (1)
EPSS history
Timeline
  • 10 FEB 17:52Z
    After Effects | Out-of-bounds Write (CWE-787)
    cvelistv5