{"id":"CVE-2026-110087","kind":"vulnerability","aliases":["CVE-2026-110087"],"related":[],"title":"Adobe Premiere Pro: malicious file can run code as the user","description":"Premiere Pro is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","summary":"Adobe Premiere Pro has a buffer overflow that lets a crafted file run arbitrary code in the context of the current user. An attacker needs a low-privileged account and a victim who opens the malicious file.","severity":"medium","cvss":6.7,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Premiere Pro","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["adobe","macos","other","premiere-pro","windows"],"not_affected_if":["no-premiere-pro-installed"],"how_to_check":"- Check the installed Premiere Pro version in the Help or About menu and compare it with the fixed version named in Adobe's advisory, which the sources do not give.","fix":null,"status":"open","published_at":"2026-11-10T21:18:19+00:00","first_seen_at":"2026-11-10T21:46:08+00:00","triaged_at":"2026-11-10T21:48:30+00:00","updated_at":"2026-11-10T21:48:30+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-11-10T21:48:30Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Adobe Premiere Pro: malicious file can run code as the user","impact":"high","summary":"Adobe Premiere Pro has a buffer overflow that lets a crafted file run arbitrary code in the context of the current user. An attacker needs a low-privileged account and a victim who opens the malicious file.","audience":"everyone","category":"other","nicknames":[],"who_cares":["premiere-pro","adobe","windows","macos"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Arbitrary code runs as the logged-in user on the machine.","analyst_note":"Find the affected and fixed Premiere Pro versions in Adobe's security bulletin for this CVE; the NVD entry does not list them.","how_to_check":"- Check the installed Premiere Pro version in the Help or About menu and compare it with the fixed version named in Adobe's advisory, which the sources do not give.","plain_action":"If you use Adobe Premiere Pro, update it to the latest version through the Creative Cloud app and avoid opening project or media files from people you do not trust until you have.","product_name":"Premiere Pro","needs_analyst":true,"not_affected_if":["no-premiere-pro-installed"],"who_is_affected":"Anyone running Premiere Pro who opens files from untrusted sources can be exposed, since the victim must open the malicious file. The sources do not name affected version ranges. Teams that do not run Premiere Pro can skip it.","user_interaction":"yes","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000745,"input_tokens":4578,"output_tokens":575,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-110087':14A,17A '-2026':13A,16A 'account':56B 'adob':1A,20B,27B 'affect':68C 'arbitrari':40B,78C,99C 'attack':50B,92C,107C 'beyond':105C 'buffer':32B,71C 'code':8A,41B,79C,100C 'condit':104C 'context':44B,83C 'control':109C 'could':75C,93C 'craft':37B 'current':47B,86C 'cve':12A,15A 'depend':102C 'execut':80C,98C 'exploit':94C,101C,110C 'file':5A,38B,64B,125C 'interact':116C 'issu':113C 'let':35B 'low':54B,90C 'low-privileg':53B,89C 'maco':21B 'malici':4A,63B,124C 'must':121C 'need':51B 'open':61B,122C 'overflow':33B,72C 'premier':2A,24B,28B,65C 'premiere':18A 'premiere-pro':23B 'privileg':55B,91C 'pro':3A,19A,25B,29B,66C 'requir':114C 'result':76C 'run':7A,39B 'user':11A,48B,87C,115C 'victim':59B,120C 'vulner':73C,96C 'window':26B","nicknames":[],"mitigations":[],"who_affected":"Anyone running Premiere Pro who opens files from untrusted sources can be exposed, since the victim must open the malicious file. The sources do not name affected version ranges. Teams that do not run Premiere Pro can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":"If you use Adobe Premiere Pro, update it to the latest version through the Creative Cloud app and avoid opening project or media files from people you do not trust until you have.","pkeys":["premierepro","pro"],"ptokens":["premiere","pro"],"labels":["adobe","macos","medium","other","premierepro","vendor","windows"],"campaign_type":null,"search_a":"'-110087':14A,17A '-2026':13A,16A 'adob':1A 'code':8A 'cve':12A,15A 'file':5A 'malici':4A 'premier':2A 'premiere':18A 'pro':3A,19A 'run':7A 'user':11A","search_b":"'account':56B 'adob':20B,27B 'arbitrari':40B 'attack':50B 'buffer':32B 'code':41B 'context':44B 'craft':37B 'current':47B 'file':38B,64B 'let':35B 'low':54B 'low-privileg':53B 'maco':21B 'malici':63B 'need':51B 'open':61B 'overflow':33B 'premier':24B,28B 'premiere-pro':23B 'privileg':55B 'pro':25B,29B 'run':39B 'user':48B 'victim':59B 'window':26B","search_c":"'affect':68C 'arbitrari':78C,99C 'attack':92C,107C 'beyond':105C 'buffer':71C 'code':79C,100C 'condit':104C 'context':83C 'control':109C 'could':75C,93C 'current':86C 'depend':102C 'execut':80C,98C 'exploit':94C,101C,110C 'file':125C 'interact':116C 'issu':113C 'low':90C 'low-privileg':89C 'malici':124C 'must':121C 'open':122C 'overflow':72C 'premier':65C 'privileg':91C 'pro':66C 'requir':114C 'result':76C 'user':87C,115C 'victim':120C 'vulner':73C,96C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T21:18:19+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-110087","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110087","severity":null,"published_at":"2026-11-10T21:18:19+00:00","modified_at":"2026-11-10T21:18:19+00:00","first_seen_at":"2026-11-10T21:46:08+00:00","fetched_at":"2026-11-10T21:46:08+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}