Adobe After Effects
cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*
- <= 25.6
A type confusion vulnerability allowing arbitrary code execution has been identified in Adobe After Effects versions 25.6 and earlier. This vulnerability requires user interaction, as a victim must open a malicious file for exploitation to occur.
Exploitation of this vulnerability could result in arbitrary code execution in the context of the current user.
Users are advised to update to Adobe After Effects versions 25.6.4 or 26.0, available through the Adobe Download Center. For managed environments, IT administrators can deploy these updates using the Admin Console.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.