{"id":"CVE-2026-110085","kind":"vulnerability","aliases":["CVE-2026-110085"],"related":[],"title":"Adobe Premiere Pro: malicious file can run code as the user","description":"Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","summary":"Adobe Premiere Pro has an out-of-bounds write flaw that lets a crafted file write past a memory buffer. An attacker who gets a victim to open that file can run code with the victim's user rights.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Adobe Premiere","fixed":["26.5.3","27.0"],"affected":"<= 26.5.2; <= 25.6.6","ecosystem":"vendor"}],"ecosystems":[],"tags":["adobe","macos","other","premiere","premiere-pro","user-interaction","windows"],"not_affected_if":["no-untrusted-files"],"how_to_check":"In Premiere, Help > About Premiere Pro. Affected: 26.5.2 and earlier, or 25.6.6 and earlier (Windows and macOS). Fixed: 26.5.3 or 27.0.","fix":"Update Adobe Premiere to 27.0 or 26.5.3 (Creative Cloud app or Download Center).","status":"open","published_at":"2026-11-10T21:18:19+00:00","first_seen_at":"2026-11-10T21:46:08+00:00","triaged_at":"2026-11-10T21:48:20+00:00","updated_at":"2026-11-10T22:03:21+00:00","category":"other","confidence":0.9,"triage":{"at":"2026-11-10T21:48:20Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Adobe Premiere Pro: malicious file can run code as the user","impact":"high","summary":"Adobe Premiere Pro has an out-of-bounds write flaw that lets a crafted file write past a memory buffer. An attacker who gets a victim to open that file can run code with the victim's user rights.","audience":"businesses","category":"other","nicknames":[],"who_cares":["premiere-pro","adobe","windows","macos"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"code runs as the current user after a malicious file is opened","analyst_note":"Find Adobe's security bulletin for CVE-2026-110085 to confirm affected versions and the fixed build.","how_to_check":"- Open Premiere Pro and check the version under Help > About Premiere Pro, then compare it with the fixed version named in Adobe's advisory.\n- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-untrusted-files"],"who_is_affected":"Anyone running Adobe Premiere Pro on a computer and opening project or media files from outside sources could be exposed. The sources do not list affected version ranges, so check the installed version against Adobe's advisory. Teams that never open untrusted media files in Premiere Pro are at lower risk.","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000702,"input_tokens":4527,"output_tokens":499,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find Adobe's security bulletin for CVE-2026-110085 to confirm affected versions and the fixed build.","search":"'-110085':14A,17A '-2026':13A,16A 'adob':1A,20B,31B 'adobe':18A 'affect':74C 'arbitrari':87C 'attack':53B 'bound':39B,80C 'buffer':51B 'code':8A,64B,88C 'context':92C 'could':84C 'craft':45B 'current':95C 'cve':12A,15A 'execut':89C 'exploit':97C 'file':5A,46B,61B,112C 'flaw':41B 'get':55B 'interact':29B,103C 'issu':100C 'let':43B 'maco':21B 'malici':4A,111C 'memori':50B 'must':108C 'open':59B,109C 'out-of-bound':36B,77C 'past':48B 'premier':2A,23B,25B,32B,71C 'premiere':19A 'premiere-pro':24B 'pro':3A,26B,33B,72C 'requir':101C 'result':85C 'right':70B 'run':7A,63B 'user':11A,28B,69B,96C,102C 'user-interact':27B 'victim':57B,67B,107C 'vulner':82C 'window':30B 'write':40B,47B,81C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Adobe Premiere on Windows or macOS at 26.5.2 or earlier (or 25.6.6 or earlier on the older line) who opens a crafted project or media file. Exploitation needs the user to open a malicious file; Adobe is not aware of exploitation in the wild. Teams that never open files from outside sources are at lower risk.","tier":"B","verified":{"fix":{"at":"2026-11-10T22:03:21Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/premiere/apsb26-101.html","run_id":2911},"products":{"at":"2026-11-10T22:03:21Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/premiere/apsb26-101.html","run_id":2911},"how_to_check":{"at":"2026-11-10T22:03:21Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/premiere/apsb26-101.html","run_id":2911},"who_affected":{"at":"2026-11-10T22:03:21Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/premiere/apsb26-101.html","run_id":2911}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["adobepremiere","premiere"],"ptokens":["adobe","premiere"],"labels":["adobe","high","macos","other","premiere","premierepro","userinteraction","windows"],"campaign_type":null,"search_a":"'-110085':14A,17A '-2026':13A,16A 'adob':1A 'adobe':18A 'code':8A 'cve':12A,15A 'file':5A 'malici':4A 'premier':2A 'premiere':19A 'pro':3A 'run':7A 'user':11A","search_b":"'adob':20B,31B 'attack':53B 'bound':39B 'buffer':51B 'code':64B 'craft':45B 'file':46B,61B 'flaw':41B 'get':55B 'interact':29B 'let':43B 'maco':21B 'memori':50B 'open':59B 'out-of-bound':36B 'past':48B 'premier':23B,25B,32B 'premiere-pro':24B 'pro':26B,33B 'right':70B 'run':63B 'user':28B,69B 'user-interact':27B 'victim':57B,67B 'window':30B 'write':40B,47B","search_c":"'affect':74C 'arbitrari':87C 'bound':80C 'code':88C 'context':92C 'could':84C 'current':95C 'execut':89C 'exploit':97C 'file':112C 'interact':103C 'issu':100C 'malici':111C 'must':108C 'open':109C 'out-of-bound':77C 'premier':71C 'pro':72C 'requir':101C 'result':85C 'user':96C,102C 'victim':107C 'vulner':82C 'write':81C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T21:18:19+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-110085","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110085","severity":null,"published_at":"2026-11-10T21:18:19+00:00","modified_at":"2026-11-10T21:18:19+00:00","first_seen_at":"2026-11-10T21:46:08+00:00","fetched_at":"2026-11-10T21:46:08+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-110085:2911","url":"https://www.adobe.com/trust/security/products/premiere/apsb26-101.html","severity":null,"published_at":"2026-11-10T22:03:21+00:00","modified_at":"2026-11-10T22:03:21+00:00","first_seen_at":"2026-11-10T22:03:21+00:00","fetched_at":"2026-11-10T22:03:21+00:00","note":"Read Adobe APSB26-101 (Nov 10 2026): affected 26.5.2 and earlier, 25.6.6 and earlier; fixed 26.5.3 / 27.0; no known exploitation.","cites":["https://www.adobe.com/trust/security/products/premiere/apsb26-101.html"]}],"documents":[{"id":119283,"url":"https://www.adobe.com/trust/security/products/premiere/apsb26-101.html","title":"Adobe Premiere APSB26-101","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}