Adobe Security Bulletin

Last updated on Nov 10, 2026

Security update available for Adobe After Effects | APSB26-100

Bulletin ID

Date published

Priority

APSB26-100

November 10, 2026

3

style

grid width 12

Summary

Adobe has released a priority 3 security update for Adobe After Effects. This update addresses vulnerabilities rated high, medium, and low that could result in arbitrary code execution, application denial-of-service, and memory exposure.

Adobe is not aware of any exploits in the wild for any of the issues addressed in this update.

Affected Versions

Product

Version

Platform

Adobe After Effects

26.5 and earlier

Windows and macOS

Adobe After Effects

25.6.6 and earlier

Windows and macOS

style

grid width 12

Solution

Adobe categorizes this update with the following priority rating and recommends users update their installation to the newest version:

Product

Updated version

Platform

Priority rating

Availability

Adobe After Effects

27.0

Windows and macOS

3

Download Center

Adobe After Effects

26.5.3

Windows and macOS

3

Download Center

style

grid width 12

Vulnerability Details

CVE-2026-113534

Vulnerability category: Improper Input Validation (CWE-20)
Vulnerability impact: Arbitrary code execution
Severity: High
CVSS base score: 8.6
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CVE-2026-113532

Vulnerability category: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Vulnerability impact: Arbitrary code execution
Severity: High
CVSS base score: 8.6
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CVE-2026-113526

Vulnerability category: Violation of Secure Design Principles (CWE-657)
Vulnerability impact: Arbitrary code execution
Severity: High
CVSS base score: 8.6
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CVE-2026-113538

Vulnerability category: Out-of-bounds Write (CWE-787)
Vulnerability impact: Arbitrary code execution
Severity: High
CVSS base score: 7.8
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2026-113536

Vulnerability category: Out-of-bounds Write (CWE-787)
Vulnerability impact: Arbitrary code execution
Severity: High
CVSS base score: 7.8
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2026-113530

Vulnerability category: Out-of-bounds Write (CWE-787)
Vulnerability impact: Arbitrary code execution
Severity: High
CVSS base score: 7.8
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2026-113528

Vulnerability category: Out-of-bounds Write (CWE-787)
Vulnerability impact: Arbitrary code execution
Severity: High
CVSS base score: 7.8
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2026-113525

Vulnerability category: Out-of-bounds Write (CWE-787)
Vulnerability impact: Arbitrary code execution
Severity: High
CVSS base score: 7.8
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2026-113523

Vulnerability category: Out-of-bounds Write (CWE-787)
Vulnerability impact: Arbitrary code execution
Severity: High
CVSS base score: 7.8
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2026-113517

Vulnerability category: Out-of-bounds Write (CWE-787)
Vulnerability impact: Arbitrary code execution
Severity: High
CVSS base score: 7.8
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2026-113516

Vulnerability category: Out-of-bounds Write (CWE-787)
Vulnerability impact: Arbitrary code execution
Severity: High
CVSS base score: 7.8
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2026-113512

Vulnerability category: Stack-based Buffer Overflow (CWE-121)
Vulnerability impact: Arbitrary code execution
Severity: High
CVSS base score: 7.8
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2026-123263

Vulnerability category: Heap-based Buffer Overflow (CWE-122)
Vulnerability impact: Arbitrary code execution
Severity: High
CVSS base score: 7.8
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2026-113521

Vulnerability category: NULL Pointer Dereference (CWE-476)
Vulnerability impact: Application denial-of-service
Severity: Medium
CVSS base score: 5.5
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVE-2026-113519

Vulnerability category: Out-of-bounds Read (CWE-125)
Vulnerability impact: Memory exposure
Severity: Medium
CVSS base score: 5.5
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CVE-2026-113514

Vulnerability category: Out-of-bounds Read (CWE-125)
Vulnerability impact: Memory exposure
Severity: Medium
CVSS base score: 5.5
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CVE-2026-110093

Vulnerability category: Out-of-bounds Read (CWE-125)
Vulnerability impact: Application denial-of-service
Severity: Low
CVSS base score: 3.3
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Acknowledgments

Adobe would like to thank the following researchers for reporting the relevant issues and for working with Adobe to help protect our customers:

Kieran (kaiksi) — CVE-2026-113534, CVE-2026-113532, CVE-2026-113526
yjdfy — CVE-2026-113538, CVE-2026-113536, CVE-2026-113530, CVE-2026-113528
Jony (jony_juice) — CVE-2026-113525, CVE-2026-113523, CVE-2026-113517, CVE-2026-113516, CVE-2026-113512, CVE-2026-123263, CVE-2026-113521, CVE-2026-113519, CVE-2026-113514
prl — CVE-2026-110093

NOTE: Adobe maintains a public bug bounty program through Intigriti. If you’re an external security researcher interested in identifying and responsibly reporting potential security vulnerabilities to Adobe, please visit the Adobe Bug Bounty Program for more information.

For more information, visit Adobe Security Bulletin and Advisories or email PSIRT@adobe.com.

CardTitle

APSB26-100

CardDescription

Priority 3 Security update

CardImage

Adobe

Created

2026-11-10

Tags

caas:content-type/documentation,caas:trust-center/security-bulletin,caas:products/after-effects

PrimaryTag

caas:content-type/article

Details

caas:mnemonics/after-effects

Arbitrary

search: Adobe After Effects CVE-2026-113534 CVE-2026-113532 CVE-2026-113526 CVE-2026-113538 CVE-2026-113536 CVE-2026-113530 CVE-2026-113528 CVE-2026-113525 CVE-2026-113523 CVE-2026-113517 CVE-2026-113516 CVE-2026-113512 CVE-2026-123263 CVE-2026-113521 CVE-2026-113519 CVE-2026-113514 CVE-2026-110093