---
id: "CVE-2026-110088"
page: "https://infrastack.ai/live/CVE-2026-110088"
kind: "vulnerability"
aliases: ["CVE-2026-110088"]
title: "Adobe Premiere Pro: buffer overflow lets a malicious file run code"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "other"
products: [{"name": "Adobe Premiere", "fixed": ["26.5.3"], "affected": "<= 26.5.2", "ecosystem": "vendor"}, {"name": "Adobe Premiere (25.6 branch)", "fixed": ["27.0"], "affected": "<= 25.6.6", "ecosystem": "vendor"}]
ecosystems: []
tags: ["adobe", "macos", "other", "premiere-pro", "user-interaction", "windows"]
not_affected_if: ["premiere-26.5.3-or-later", "premiere-pro-not-installed"]
published_at: "2026-11-10T21:18:19+00:00"
first_seen_at: "2026-11-10T21:46:09+00:00"
updated_at: "2026-11-10T22:02:24+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110088", "first_seen_at": "2026-11-10T21:46:09+00:00"}, {"source": "analyst", "url": "https://www.adobe.com/trust/security/products/premiere/apsb26-101.html", "first_seen_at": "2026-11-10T22:02:24+00:00", "cites": ["https://www.adobe.com/trust/security/products/premiere/apsb26-101.html"]}]
exploit_sources: []
---

# Adobe Premiere Pro: buffer overflow lets a malicious file run code

Link for people: https://infrastack.ai/live/CVE-2026-110088 (this .md is for agents)

Adobe Premiere Pro has a buffer overflow that an attacker can trigger with a crafted file. A victim who opens the malicious file lets the attacker run code as the current user.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Adobe Premiere affected <= 26.5.2 fixed 26.5.3
- vendor:Adobe Premiere (25.6 branch) affected <= 25.6.6 fixed 27.0

## How to check

Open Premiere > About (macOS: Premiere menu > About; Windows: Help > About). Exposed if version is 26.5.2 or earlier, or 25.6.6 or earlier, on Windows or macOS. Fixed: 26.5.3 or 27.0.

## Fix

Update Adobe Premiere to 26.5.3 (26.x branch) or 27.0 (also the move for 25.6.x), via Creative Cloud / Download Center.

## Timeline

- 2026-11-10T21:46:09+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-110088
- 2026-11-10T22:02:24+00:00 analyst https://www.adobe.com/trust/security/products/premiere/apsb26-101.html — Read Adobe APSB26-101 (Nov 10 2026): affected Premiere <=26.5.2 and <=25.6.6, fixed 26.5.3 / 27.0, Win+macOS, no known exploitation. Fix path for 25.6.x branch not stated beyond 27.0.

## Documents

- [advisory] Adobe Premiere APSB26-101 https://www.adobe.com/trust/security/products/premiere/apsb26-101.html

## From the sources

Premiere Pro is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_