CVE-2023-29321

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Adobe Animate versions 22.0.9 (and earlier) and 23.0.1 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published: Jun 15, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-293225.4Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privi CVE-2023-293237.8ascii_load_sockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and OpenSMTPD Portable before 7.0.0-portable commit CVE-2023-293246.5Windows MSHTML Platform Security Feature Bypass Vulnerability CVE-2023-293257.5Windows OLE Remote Code Execution Vulnerability CVE-2023-293267.8.NET Framework Remote Code Execution Vulnerability CVE-2023-293288.8Microsoft Teams Remote Code Execution Vulnerability CVE-2023-29338.8Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted CVE-2023-293308.8Microsoft Teams Remote Code Execution Vulnerability CVE-2023-293317.5.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2023-293329.8Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability CVE-2023-293333.3Microsoft Access Denial of Service Vulnerability CVE-2023-293344.3Microsoft Edge (Chromium-based) Spoofing Vulnerability