High · published May 12, 2026
After Effects versions 26.0, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
| Product | Versions | Fixed in |
|---|---|---|
| adobe/after_effects | < 25.6.5 | 25.6.5 |
| adobe/after_effects | all versions | — |