CVE-2026-110085

HighCVSS 7.8/10Last modified Nov 11, 2026

Description

Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published: Nov 10, 2026
Last modified: Nov 11, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-1100867.8Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current CVE-2026-1100876.7Premiere Pro is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user CVE-2026-1100887.8Premiere Pro is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user CVE-2026-1100897.8Premiere Pro is affected by a Buffer Underwrite ('Buffer Underflow') vulnerability that could result in arbitrary code execution in the cont CVE-2026-110099.6Use after free in USB in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape v CVE-2026-1100907.1Premiere Pro is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead CVE-2026-1100917.1Premiere Pro is affected by a Missing Authentication for Critical Function vulnerability that could result in a Security feature bypass. An CVE-2026-1100933.3After Effects is affected by an out-of-bounds read vulnerability that could result in an application denial-of-service. An attacker could ex CVE-2026-1100953.7fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4 CVE-2026-1100978.1Ikaros 1.2.0 through 1.2.5 contains an authentication bypass vulnerability that allows attackers with a valid password to skip TOTP verifica CVE-2026-1100985.4Jorani before 1.0.4 contains an insecure direct object reference vulnerability that allows authenticated users to modify, delete, and view o CVE-2026-1100994.3Jorani before 1.0.4 contains a missing authorization vulnerability in the Hr controller's exportLeaves, exportOvertime and exportEmployees a