#202020

Adobe Security Bulletin

Last updated on Jul 14, 2026

Security Updates Available for Adobe After Effects | APSB26-78

Bulletin ID
Date published
Priority
APSB26-78
July 14, 2026
3

Summary

Adobe has released an update for Adobe After Effects for Windows and macOS. This update addresses critical security vulnerabilities. Successful exploitation could lead to arbitrary code execution.

Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates.

Affected Versions

Product
Version
Platform
Adobe After Effects
25.6.5 and earlier versions
Windows and macOS
Adobe After Effects
26.2.1 and earlier versions
Windows and macOS

Solution

Adobe categorizes these updates with the following priority ratings and recommends users update their installation to the newest version via the Creative Cloud desktop app’s update mechanism. For more information, please reference this help page.

For managed environments, IT administrators can use the Admin Console to deploy Creative Cloud applications to end users. Refer to this help page for more information.

Product
Version
Platform
Priority rating
Availability
Adobe After Effects
25.6.6
Windows and macOS
3
Download Center
Adobe After Effects
26.3
Windows and macOS
3
Download Center

Vulnerability Details

CVE-2026-48274
Vulnerability category: Out-of-bounds Write (CWE-787)
Vulnerability impact: Arbitrary code execution
Severity: Critical
CVSS base score: 7.8
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVE-2026-48367
Vulnerability category: Out-of-bounds Write (CWE-787)
Vulnerability impact: Arbitrary code execution
Severity: Critical
CVSS base score: 7.8
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVE-2026-34690
Vulnerability category: Stack-based Buffer Overflow (CWE-121)
Vulnerability impact: Arbitrary code execution
Severity: Critical
CVSS base score: 7.8
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Acknowledgements

Adobe would like to thank the following for reporting the relevant issues and for working with Adobe to help protect our customers:

  • yjdfy - CVE-2026-48274, CVE-2026-48367
  • voidexploit - CVE-2026-34690