CVE-2026-21351CWE-416

CVE-2026-21351

High · published February 10, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
16.0
In the wild
Unconfirmed
What it is

🚨 Just one malicious After Effects project file could let an attacker execute arbitrary code on your system! ⚡ Think of it like an art gallery where someone slips a harmful painting into the exhibit—if you take a closer look, you might inadvertently set off a chain reaction that damages everything around you! This vulnerability could allow an attacker to run any code with the current user's permissions, potentially leading to data theft, system compromise, or worse. While the attacker needs the user to open the malicious file, the consequences can be absolutely devastating if successfully exploited!

Put simply

Think of it like an art gallery where someone slips a harmful painting into the exhibit—if you take a closer look, you might inadvertently set off a chain reaction that damages everything around you! The Use After Free vulnerability in After Effects allows for arbitrary code execution when the software mishandles memory allocation after a resource is freed.

What to do

This vulnerability could allow an attacker to run any code with the current user's permissions, potentially leading to data theft, system compromise, or worse. While the attacker needs the user to open the malicious file, the consequences can be absolutely devastating if successfully exploited! To protect yourself, update After Effects to version 25.6.1 or later immediately. Encourage users to refrain from opening suspicious files and implement additional security measures like real-time scanning of attachments. 🛡️ You've got this! Stay vigilant and keep your software updated to keep the bad guys at bay! 💪✨

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00254 · 16.0th percentile
Weakness
CWE-416 · Use After Free
Published
2026-02-10T23:16Z
Affected products (1)
ProductVersionsFixed in
adobe/after_effects< 25.6.425.6.4
References (1)
EPSS history
Timeline
  • 10 FEB 17:52Z
    After Effects | Use After Free (CWE-416)
    cvelistv5