{"id":"CVE-2026-110089","kind":"vulnerability","aliases":["CVE-2026-110089"],"related":[],"title":"Adobe Premiere Pro: malicious file opens a buffer underflow for code execution","description":"Premiere Pro is affected by a Buffer Underwrite ('Buffer Underflow') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","summary":"Adobe Premiere Pro has a buffer underflow that can be triggered by opening a crafted file. A successful attack runs arbitrary code with the privileges of the current user.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Adobe Premiere","fixed":["26.5.3","27.0"],"affected":"<= 26.5.2; <= 25.6.6","ecosystem":"vendor"}],"ecosystems":[],"tags":["adobe","desktop","macos","other","premiere","premiere-pro","windows"],"not_affected_if":["file-not-opened","premiere-26.5.3-or-later","premiere-27.0-or-later"],"how_to_check":"In Premiere: Help > About Premiere (or Creative Cloud desktop app > Apps) and read the version. Affected: 26.5.2 and earlier, or 25.6.6 and earlier. Fixed: 26.5.3 or 27.0.","fix":"Update Adobe Premiere to 26.5.3 (26.x line) or 27.0; the 25.6.x line (25.6.6 and earlier affected) should move to 26.5.3 or 27.0 via Creative Cloud.","status":"open","published_at":"2026-11-10T21:18:20+00:00","first_seen_at":"2026-11-10T21:46:09+00:00","triaged_at":"2026-11-10T21:48:16+00:00","updated_at":"2026-11-10T22:02:25+00:00","category":"other","confidence":0.9,"triage":{"at":"2026-11-10T21:48:16Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Adobe Premiere Pro: malicious file opens a buffer underflow for code execution","impact":"high","summary":"Adobe Premiere Pro has a buffer underflow that can be triggered by opening a crafted file. A successful attack runs arbitrary code with the privileges of the current user.","audience":"everyone","category":"other","nicknames":[],"who_cares":["premiere-pro","adobe","windows","macos"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Arbitrary code runs as the current user after opening a file.","analyst_note":"Find Adobe's security bulletin for Premiere Pro to confirm affected and fixed versions; the NVD entry gives none.","how_to_check":"unknown","plain_action":"Update Adobe Premiere Pro to the latest version and avoid opening project or media files from unknown sources.","product_name":"","needs_analyst":true,"not_affected_if":["file-not-opened"],"who_is_affected":"Anyone running Adobe Premiere Pro whose affected version is not stated in the sources. Exposure requires the user to open a malicious file in the application. The sources do not list affected version ranges.","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000684,"input_tokens":4571,"output_tokens":454,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find Adobe's security bulletin for Premiere Pro to confirm affected and fixed versions; the NVD entry gives none.","search":"'-110089':15A,18A '-2026':14A,17A 'adob':1A,21B,30B 'adobe':19A 'affect':62C 'arbitrari':50B,74C,92C 'attack':48B,85C 'buffer':8A,35B,65C,67C 'code':11A,51B,75C,93C 'context':79C 'could':71C,86C 'craft':44B 'current':57B,82C 'cve':13A,16A 'desktop':22B 'execut':12A,76C,91C 'exploit':87C,94C 'file':5A,45B,109C 'interact':100C 'issu':97C 'maco':23B 'malici':4A,108C 'must':105C 'open':6A,42B,106C 'premier':2A,25B,27B,31B,59C 'premiere':20A 'premiere-pro':26B 'privileg':54B 'pro':3A,28B,32B,60C 'requir':98C 'result':72C 'run':49B 'success':47B 'trigger':40B 'underflow':9A,36B,68C 'underwrit':66C 'user':58B,83C,99C 'victim':104C 'vulner':69C,89C 'window':29B","nicknames":[],"mitigations":[],"who_affected":"Anyone running Adobe Premiere on Windows or macOS at 26.5.2 or earlier, or 25.6.6 or earlier. Exploitation needs a user to open a malicious file; code then runs with that user's privileges. Machines without Premiere installed, or where users only open files from trusted sources, can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-10T22:02:25Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/premiere/apsb26-101.html","run_id":2908},"products":{"at":"2026-11-10T22:02:25Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/premiere/apsb26-101.html","run_id":2908},"how_to_check":{"at":"2026-11-10T22:02:25Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/premiere/apsb26-101.html","run_id":2908},"who_affected":{"at":"2026-11-10T22:02:25Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/premiere/apsb26-101.html","run_id":2908}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":"Update Adobe Premiere Pro to the latest version and avoid opening project or media files from unknown sources.","pkeys":["adobepremiere","premiere"],"ptokens":["adobe","premiere"],"labels":["adobe","desktop","high","macos","other","premiere","premierepro","windows"],"campaign_type":null,"search_a":"'-110089':15A,18A '-2026':14A,17A 'adob':1A 'adobe':19A 'buffer':8A 'code':11A 'cve':13A,16A 'execut':12A 'file':5A 'malici':4A 'open':6A 'premier':2A 'premiere':20A 'pro':3A 'underflow':9A","search_b":"'adob':21B,30B 'arbitrari':50B 'attack':48B 'buffer':35B 'code':51B 'craft':44B 'current':57B 'desktop':22B 'file':45B 'maco':23B 'open':42B 'premier':25B,27B,31B 'premiere-pro':26B 'privileg':54B 'pro':28B,32B 'run':49B 'success':47B 'trigger':40B 'underflow':36B 'user':58B 'window':29B","search_c":"'affect':62C 'arbitrari':74C,92C 'attack':85C 'buffer':65C,67C 'code':75C,93C 'context':79C 'could':71C,86C 'current':82C 'execut':76C,91C 'exploit':87C,94C 'file':109C 'interact':100C 'issu':97C 'malici':108C 'must':105C 'open':106C 'premier':59C 'pro':60C 'requir':98C 'result':72C 'underflow':68C 'underwrit':66C 'user':83C,99C 'victim':104C 'vulner':69C,89C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T21:18:20+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-110089","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110089","severity":null,"published_at":"2026-11-10T21:18:20+00:00","modified_at":"2026-11-10T21:18:20+00:00","first_seen_at":"2026-11-10T21:46:09+00:00","fetched_at":"2026-11-10T21:46:09+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-110089:2908","url":"https://www.adobe.com/trust/security/products/premiere/apsb26-101.html","severity":null,"published_at":"2026-11-10T22:02:25+00:00","modified_at":"2026-11-10T22:02:25+00:00","first_seen_at":"2026-11-10T22:02:25+00:00","fetched_at":"2026-11-10T22:02:25+00:00","note":"Read Adobe APSB26-101 (Nov 10 2026): affected Premiere <=26.5.2 and <=25.6.6, fixed 26.5.3 / 27.0; Adobe not aware of exploits. Local, user-interaction, no mitigations.","cites":["https://www.adobe.com/trust/security/products/premiere/apsb26-101.html"]}],"documents":[{"id":119283,"url":"https://www.adobe.com/trust/security/products/premiere/apsb26-101.html","title":"Adobe Premiere APSB26-101","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}