{"id":"CVE-2026-110093","kind":"vulnerability","aliases":["CVE-2026-110093"],"related":[],"title":"Adobe After Effects: out-of-bounds read lets a malicious file crash the app","description":"After Effects is affected by an out-of-bounds read vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","summary":"Adobe After Effects has an out-of-bounds read flaw that can crash the application. An attacker who gets a victim to open a malicious file can cause a denial-of-service.","severity":"low","cvss":3.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["adobe","after-effects","creative-workstations","other"],"not_affected_if":["no-after-effects-installed"],"how_to_check":"- Check the installed After Effects version in the application's About menu","fix":null,"status":"open","published_at":"2026-11-10T21:18:20+00:00","first_seen_at":"2026-11-10T21:46:09+00:00","triaged_at":"2026-11-10T21:50:00+00:00","updated_at":"2026-11-10T21:50:00+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-11-10T21:50:00Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Adobe After Effects: out-of-bounds read lets a malicious file crash the app","impact":"low","summary":"Adobe After Effects has an out-of-bounds read flaw that can crash the application. An attacker who gets a victim to open a malicious file can cause a denial-of-service.","audience":"businesses","category":"other","nicknames":[],"who_cares":["after-effects","adobe","creative-workstations"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"application crashes, causing denial-of-service for the user","analyst_note":"","how_to_check":"- Check the installed After Effects version in the application's About menu\n- unknown","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["no-after-effects-installed"],"who_is_affected":"Teams that run Adobe After Effects on workstations and open project or media files from outside sources are the ones exposed. The sources do not name affected versions. Teams that do not use After Effects can skip it.","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"no","severity_if_unknown":"low"},"cost_usd":0.000652,"input_tokens":4545,"output_tokens":395,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-110093':18A,21A '-2026':17A,20A 'adob':1A,22B,29B 'affect':66C 'after-effect':23B 'app':15A 'applic':44B,80C,94C 'attack':46B,86C 'bound':7A,37B,72C 'caus':57B 'condit':102C 'could':76C,87C 'crash':13A,42B,92C 'creativ':27B 'creative-workst':26B 'cve':16A,19A 'denial':60B,82C,99C 'denial-of-servic':59B,81C,98C 'effect':3A,25B,31B,64C 'exploit':88C,103C 'file':12A,55B,118C 'flaw':39B 'get':48B 'interact':109C 'issu':106C 'lead':95C 'let':9A 'malici':11A,54B,117C 'must':114C 'open':52B,115C 'out-of-bound':4A,34B,69C 'read':8A,38B,73C 'requir':107C 'result':77C 'servic':62B,84C,101C 'user':108C 'victim':50B,113C 'vulner':74C,90C 'workstat':28B","nicknames":[],"mitigations":[],"who_affected":"Teams that run Adobe After Effects on workstations and open project or media files from outside sources are the ones exposed. The sources do not name affected versions. Teams that do not use After Effects can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["adobe","aftereffects","creativeworkstations","low","other"],"campaign_type":null,"search_a":"'-110093':18A,21A '-2026':17A,20A 'adob':1A 'app':15A 'bound':7A 'crash':13A 'cve':16A,19A 'effect':3A 'file':12A 'let':9A 'malici':11A 'out-of-bound':4A 'read':8A","search_b":"'adob':22B,29B 'after-effect':23B 'applic':44B 'attack':46B 'bound':37B 'caus':57B 'crash':42B 'creativ':27B 'creative-workst':26B 'denial':60B 'denial-of-servic':59B 'effect':25B,31B 'file':55B 'flaw':39B 'get':48B 'malici':54B 'open':52B 'out-of-bound':34B 'read':38B 'servic':62B 'victim':50B 'workstat':28B","search_c":"'affect':66C 'applic':80C,94C 'attack':86C 'bound':72C 'condit':102C 'could':76C,87C 'crash':92C 'denial':82C,99C 'denial-of-servic':81C,98C 'effect':64C 'exploit':88C,103C 'file':118C 'interact':109C 'issu':106C 'lead':95C 'malici':117C 'must':114C 'open':115C 'out-of-bound':69C 'read':73C 'requir':107C 'result':77C 'servic':84C,101C 'user':108C 'victim':113C 'vulner':74C,90C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T21:18:20+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-110093","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110093","severity":null,"published_at":"2026-11-10T21:18:20+00:00","modified_at":"2026-11-10T21:18:20+00:00","first_seen_at":"2026-11-10T21:46:09+00:00","fetched_at":"2026-11-10T21:46:09+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}