---
id: "CVE-2026-110089"
page: "https://infrastack.ai/live/CVE-2026-110089"
kind: "vulnerability"
aliases: ["CVE-2026-110089"]
title: "Adobe Premiere Pro: malicious file opens a buffer underflow for code execution"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "other"
products: [{"name": "Adobe Premiere", "fixed": ["26.5.3", "27.0"], "affected": "<= 26.5.2; <= 25.6.6", "ecosystem": "vendor"}]
ecosystems: []
tags: ["adobe", "desktop", "macos", "other", "premiere", "premiere-pro", "windows"]
not_affected_if: ["file-not-opened", "premiere-26.5.3-or-later", "premiere-27.0-or-later"]
published_at: "2026-11-10T21:18:20+00:00"
first_seen_at: "2026-11-10T21:46:09+00:00"
updated_at: "2026-11-10T22:02:25+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110089", "first_seen_at": "2026-11-10T21:46:09+00:00"}, {"source": "analyst", "url": "https://www.adobe.com/trust/security/products/premiere/apsb26-101.html", "first_seen_at": "2026-11-10T22:02:25+00:00", "cites": ["https://www.adobe.com/trust/security/products/premiere/apsb26-101.html"]}]
exploit_sources: []
---

# Adobe Premiere Pro: malicious file opens a buffer underflow for code execution

Link for people: https://infrastack.ai/live/CVE-2026-110089 (this .md is for agents)

Adobe Premiere Pro has a buffer underflow that can be triggered by opening a crafted file. A successful attack runs arbitrary code with the privileges of the current user.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Adobe Premiere affected <= 26.5.2; <= 25.6.6 fixed 26.5.3, 27.0

## How to check

In Premiere: Help > About Premiere (or Creative Cloud desktop app > Apps) and read the version. Affected: 26.5.2 and earlier, or 25.6.6 and earlier. Fixed: 26.5.3 or 27.0.

## Fix

Update Adobe Premiere to 26.5.3 (26.x line) or 27.0; the 25.6.x line (25.6.6 and earlier affected) should move to 26.5.3 or 27.0 via Creative Cloud.

## Timeline

- 2026-11-10T21:46:09+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-110089
- 2026-11-10T22:02:25+00:00 analyst https://www.adobe.com/trust/security/products/premiere/apsb26-101.html — Read Adobe APSB26-101 (Nov 10 2026): affected Premiere <=26.5.2 and <=25.6.6, fixed 26.5.3 / 27.0; Adobe not aware of exploits. Local, user-interaction, no mitigations.

## Documents

- [advisory] Adobe Premiere APSB26-101 https://www.adobe.com/trust/security/products/premiere/apsb26-101.html

## From the sources

Premiere Pro is affected by a Buffer Underwrite ('Buffer Underflow') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_