CVE-2026-21320

⚠️ high

Summary

After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS Score

7.8

High

EPSS Score

0.0

Exploit Probability

Published Date

2026-02-10

First Seen: 2026-02-11

📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 69.5% of all 335,187 vulnerabilities in our database.

#102,106

Above average severity

Severity Percentile

Last Modified 2026-02-11

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE IDs (Weakness Types)

CWE-416

📦 Affected Products 1

Vendor	Product	Status	Affected Versions
adobe	after_effects	Affected	< 25.6.4

🔗 References 1

https://helpx.adobe.com/security/products/after_effe...

Vendor Advisory

🔗 Related CVEs 6

CVE ID	Severity	CVSS	EPSS	Summary	Published
CVE-2026-34690	⚠️ high	7.8	0.3	After Effects is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution i...	2026-05-12
CVE-2026-21318	⚠️ high	7.8	0.0	After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitr...	2026-02-10
CVE-2026-21319	🔶 medium	5.5	0.0	After Effects versions 25.6 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory ex...	2026-02-10
CVE-2026-21321	⚠️ high	7.8	0.0	After Effects versions 25.6 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could resul...	2026-02-10
CVE-2026-21322	⚠️ high	7.8	0.0	After Effects versions 25.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file,...	2026-02-10
CVE-2026-21323	⚠️ high	7.8	0.0	After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary co...	2026-02-10

These CVEs affect the same products