CVE-2026-113526

HighCVSS 8.6/10Last modified Nov 11, 2026

Description

After Effects is affected by a Violation of Secure Design Principles vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-657

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 11, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1135287.8After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the currenCVE-2026-1135307.8After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the currenCVE-2026-1135328.6After Effects is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could leadCVE-2026-1135348.6After Effects is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the CVE-2026-1135367.8After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the currenCVE-2026-1135387.8After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the currenCVE-2026-1135395.5Media Encoder is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker couCVE-2026-113545.3The Participants Database plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8.3CVE-2026-1135417.8Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the currenCVE-2026-1135437.8Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the currenCVE-2026-1135457.8Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the currenCVE-2026-1135477.8Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the curren
CVE-2026-113526: High severity, CVSS 8.6 | Vulnix