{"id":"CVE-2026-113543","kind":"vulnerability","aliases":["CVE-2026-113543"],"related":[],"title":"Adobe Media Encoder: out-of-bounds write lets a malicious file run code","description":"Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","summary":"Adobe Media Encoder has an out-of-bounds write (CWE-787) that a crafted file can trigger, giving code execution as the current user. The victim has to open the malicious file. Adobe fixed it in APSB26-103 and is not aware of exploitation.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Adobe Media Encoder","fixed":["26.5.3","27.0"],"affected":"<= 26.5.2, <= 25.6.6","ecosystem":"vendor"}],"ecosystems":[],"tags":["adobe-media-encoder","creative-cloud","desktop","macos","other","windows"],"not_affected_if":["file-not-opened","updated-to-26.5.3-or-27.0"],"how_to_check":"Open Adobe Media Encoder > About (or Creative Cloud desktop app > Apps) and read the version. Affected: 26.5.2 and earlier, and 25.6.6 and earlier, on Windows and macOS.","fix":"Update Adobe Media Encoder to 27.0 (from 26.5.2 or earlier) or to 26.5.3 (on the 26.x line); 25.6.6 and earlier is also listed as affected, move to 26.5.3 or 27.0. Download via Download Center.","status":"open","published_at":"2026-11-10T21:18:47+00:00","first_seen_at":"2026-11-10T21:46:10+00:00","triaged_at":"2026-11-10T21:48:05+00:00","updated_at":"2026-11-10T22:41:27+00:00","category":"other","confidence":0.9,"triage":{"at":"2026-11-10T21:48:05Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Adobe Media Encoder: out-of-bounds write lets a malicious file run code","impact":"high","summary":"Adobe Media Encoder has an out-of-bounds write flaw that lets a crafted file write memory outside its bounds. An attacker who gets a victim to open that file can run code as the current user.","audience":"businesses","category":"other","nicknames":[],"who_cares":["adobe-media-encoder","creative-cloud","windows","macos"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Arbitrary code runs as the logged-in user on the machine.","analyst_note":"Find Adobe's security bulletin for this CVE to get affected and fixed versions, and the platforms it covers.","how_to_check":"unknown","plain_action":"","product_name":"Adobe Media Encoder","needs_analyst":true,"not_affected_if":["file-not-opened"],"who_is_affected":"unknown","user_interaction":"yes","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000652,"input_tokens":4525,"output_tokens":398,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find Adobe's security bulletin for this CVE to get affected and fixed versions, and the platforms it covers.","search":"'-103':73B '-113543':17A,20A '-2026':16A,19A '-787':46B 'adob':1A,25B,35B,68B 'adobe':21A 'adobe-media-encod':24B 'affect':83C 'apsb26':72B 'arbitrari':96C 'awar':77B 'bound':7A,43B,89C 'cloud':30B 'code':14A,54B,97C 'context':101C 'could':93C 'craft':49B 'creativ':29B 'creative-cloud':28B 'current':58B,104C 'cve':15A,18A 'cwe':45B 'desktop':31B 'encod':3A,27B,37B,81C 'encoder':23A 'execut':55B,98C 'exploit':79B,106C 'file':12A,50B,67B,121C 'fix':69B 'give':53B 'interact':112C 'issu':109C 'let':9A 'maco':32B 'malici':11A,66B,120C 'media':2A,22A,26B,36B,80C 'must':117C 'open':64B,118C 'out-of-bound':4A,40B,86C 'requir':110C 'result':94C 'run':13A 'trigger':52B 'user':59B,105C,111C 'victim':61B,116C 'vulner':91C 'window':34B 'write':8A,44B,90C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Adobe Media Encoder 26.5.2 or earlier, or 25.6.6 or earlier, on Windows or macOS is affected. An attacker needs the user to open a malicious file, so workstations that ingest media from outside (editors, agencies, shared drives) matter most. Systems without Media Encoder installed, or already on 26.5.3 or 27.0, can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-10T22:41:27Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/media-encoder/apsb26-103.html","run_id":3024},"products":{"at":"2026-11-10T22:41:27Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/media-encoder/apsb26-103.html","run_id":3024},"how_to_check":{"at":"2026-11-10T22:41:27Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/media-encoder/apsb26-103.html","run_id":3024},"who_affected":{"at":"2026-11-10T22:41:27Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/media-encoder/apsb26-103.html","run_id":3024}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["adobemediaencoder","mediaencoder"],"ptokens":["adobe","encoder","media"],"labels":["adobemediaencoder","creativecloud","desktop","high","macos","other","windows"],"campaign_type":null,"search_a":"'-113543':17A,20A '-2026':16A,19A 'adob':1A 'adobe':21A 'bound':7A 'code':14A 'cve':15A,18A 'encod':3A 'encoder':23A 'file':12A 'let':9A 'malici':11A 'media':2A,22A 'out-of-bound':4A 'run':13A 'write':8A","search_b":"'-103':73B '-787':46B 'adob':25B,35B,68B 'adobe-media-encod':24B 'apsb26':72B 'awar':77B 'bound':43B 'cloud':30B 'code':54B 'craft':49B 'creativ':29B 'creative-cloud':28B 'current':58B 'cwe':45B 'desktop':31B 'encod':27B,37B 'execut':55B 'exploit':79B 'file':50B,67B 'fix':69B 'give':53B 'maco':32B 'malici':66B 'media':26B,36B 'open':64B 'out-of-bound':40B 'trigger':52B 'user':59B 'victim':61B 'window':34B 'write':44B","search_c":"'affect':83C 'arbitrari':96C 'bound':89C 'code':97C 'context':101C 'could':93C 'current':104C 'encod':81C 'execut':98C 'exploit':106C 'file':121C 'interact':112C 'issu':109C 'malici':120C 'media':80C 'must':117C 'open':118C 'out-of-bound':86C 'requir':110C 'result':94C 'user':105C,111C 'victim':116C 'vulner':91C 'write':90C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T21:18:47+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113543","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113543","severity":null,"published_at":"2026-11-10T21:18:47+00:00","modified_at":"2026-11-10T21:18:47+00:00","first_seen_at":"2026-11-10T21:46:10+00:00","fetched_at":"2026-11-10T21:46:10+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-113543:3024","url":"https://www.adobe.com/trust/security/products/media-encoder/apsb26-103.html","severity":null,"published_at":"2026-11-10T22:41:27+00:00","modified_at":"2026-11-10T22:41:27+00:00","first_seen_at":"2026-11-10T22:41:27+00:00","fetched_at":"2026-11-10T22:41:27+00:00","note":"Adobe APSB26-103 (Nov 10 2026, priority 3) read directly; lists this CVE, affected/fixed versions; Adobe aware of no exploits. No PoC checked beyond bulletin.","cites":["https://www.adobe.com/trust/security/products/media-encoder/apsb26-103.html","https://www.zerodayinitiative.com/blog/2026/11/10/the-november-2026-security-update-review"]}],"documents":[{"id":119285,"url":"https://www.adobe.com/trust/security/products/media-encoder/apsb26-103.html","title":"Adobe Security Bulletin APSB26-103: Media Encoder","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":119332,"url":"https://www.zerodayinitiative.com/blog/2026/11/10/the-november-2026-security-update-review","title":"ZDI: November 2026 Security Update Review","kind":"blog","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}