PT-2026-7382 · Adobe · After Effects

Jann Horn · Published 2026-02-10 · Updated 2026-02-10 · CVE-2026-21330

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions After Effects versions 25.6 and earlier

Description The Adobe After Effects video and dynamic graphics editing software is affected by an Access of Resource Using Incompatible Type ('Type Confusion') issue. Successful exploitation of this issue could allow an attacker to execute arbitrary code in the context of the current user. Exploitation requires user interaction, specifically that a victim must open a malicious file.

Recommendations Update After Effects to a version later than 25.6.

Fix

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

BDU:2026-01923

CVE-2026-21330

Affected Products

After Effects

References · 4

• https://bdu.fstec.ru/vul/2026-01923 · Security Note
• https://osv.dev/vulnerability/CVE-2026-21330 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-21330 · Security Note
• https://helpx.adobe.com/security/products/after_effects/apsb26-15.html · Vendor Advisory