CVE-2026-113538

HighCVSS 7.8/10Last modified Nov 11, 2026

Description

After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 11, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1135395.5Media Encoder is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker couCVE-2026-113545.3The Participants Database plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8.3CVE-2026-1135417.8Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the currenCVE-2026-1135437.8Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the currenCVE-2026-1135457.8Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the currenCVE-2026-1135477.8Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the currenCVE-2026-1135495.5Audition is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exCVE-2026-113555.3The DT LMS – elearning, WordPress LMS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability chCVE-2026-1135518.8Audition is affected by a Violation of Secure Design Principles vulnerability that could result in privilege escalation. A low-privileged atCVE-2026-1135537.8Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current useCVE-2026-1135557.8Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current useCVE-2026-1135578.6Audition is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the curre
CVE-2026-113538: High severity, CVSS 7.8 | Vulnix