{"id":"CVE-2026-113545","kind":"vulnerability","aliases":["CVE-2026-113545"],"related":[],"title":"Adobe Media Encoder: malicious file opens lets attacker run code as user","description":"Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","summary":"Adobe Media Encoder has an out-of-bounds write flaw triggered when it opens a crafted file. An attacker who gets a victim to open that file can run arbitrary code in the context of the current user.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Adobe Media Encoder","fixed":["26.5.3","27.0"],"affected":"<= 25.6.6, 26.0 - 26.5.2","ecosystem":"vendor"}],"ecosystems":[],"tags":["adobe-media-encoder","creative-cloud","macos","user-interaction","vendor","windows"],"not_affected_if":["no-untrusted-files"],"how_to_check":"Open Adobe Media Encoder > Help > About (macOS: Media Encoder > About). Affected: 26.5.2 and earlier, and 25.6.6 and earlier. Fixed: 26.5.3 or 27.0.","fix":"Update Adobe Media Encoder to 27.0, or 26.5.3 on the 26.x line (25.6.6 and earlier is affected; move to 26.5.3 or 27.0), via Creative Cloud desktop app or Download Center","status":"open","published_at":"2026-11-10T21:18:48+00:00","first_seen_at":"2026-11-10T21:46:10+00:00","triaged_at":"2026-11-10T21:48:06+00:00","updated_at":"2026-11-10T22:40:09+00:00","category":"vendor","confidence":0.9,"triage":{"at":"2026-11-10T21:48:06Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Adobe Media Encoder: malicious file opens lets attacker run code as user","impact":"high","summary":"Adobe Media Encoder has an out-of-bounds write flaw triggered when it opens a crafted file. An attacker who gets a victim to open that file can run arbitrary code in the context of the current user.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["adobe-media-encoder","creative-cloud","windows","macos"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"code runs as the logged-in user on the machine","analyst_note":"Find affected and fixed Media Encoder versions in Adobe's security bulletin; the NVD entry gives no product ranges.","how_to_check":"- Open Adobe Media Encoder and check the installed version under Help > About (version not stated in sources, so check the vendor's advisory)\n- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-untrusted-files"],"who_is_affected":"Anyone running Adobe Media Encoder who opens media files from untrusted sources can be exposed, because the code runs as the logged-in user. The sources do not list affected versions. Teams that only process files they created internally are less exposed, though that is not stated in the sources.","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000702,"input_tokens":4525,"output_tokens":499,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find affected and fixed Media Encoder versions in Adobe's security bulletin; the NVD entry gives no product ranges.","search":"'-113545':15A,18A '-2026':14A,17A 'adob':1A,23B,35B 'adobe':19A 'adobe-media-encod':22B 'affect':77C 'arbitrari':65B,90C 'attack':8A,54B 'bound':43B,83C 'cloud':28B 'code':10A,66B,91C 'context':69B,95C 'could':87C 'craft':51B 'creativ':27B 'creative-cloud':26B 'current':72B,98C 'cve':13A,16A 'encod':3A,25B,37B,75C 'encoder':21A 'execut':92C 'exploit':100C 'file':5A,52B,62B,115C 'flaw':45B 'get':56B 'interact':32B,106C 'issu':103C 'let':7A 'maco':29B 'malici':4A,114C 'media':2A,20A,24B,36B,74C 'must':111C 'open':6A,49B,60B,112C 'out-of-bound':40B,80C 'requir':104C 'result':88C 'run':9A,64B 'trigger':46B 'user':12A,31B,73B,99C,105C 'user-interact':30B 'vendor':33B 'victim':58B,110C 'vulner':85C 'window':34B 'write':44B,84C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Adobe Media Encoder on Windows or macOS at 26.5.2 or earlier, or 25.6.6 or earlier. The flaw is an out-of-bounds write triggered when a user opens a crafted file, giving code execution as that user. Video/creative teams and shared render machines that open files from outside sources matter most; machines without Media Encoder can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-10T22:40:09Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/media-encoder/apsb26-103.html","run_id":3023},"products":{"at":"2026-11-10T22:40:09Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/media-encoder/apsb26-103.html","run_id":3023},"how_to_check":{"at":"2026-11-10T22:40:09Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/media-encoder/apsb26-103.html","run_id":3023},"who_affected":{"at":"2026-11-10T22:40:09Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/media-encoder/apsb26-103.html","run_id":3023}},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["adobemediaencoder","mediaencoder"],"ptokens":["adobe","encoder","media"],"labels":["adobemediaencoder","creativecloud","high","macos","userinteraction","vendor","windows"],"campaign_type":null,"search_a":"'-113545':15A,18A '-2026':14A,17A 'adob':1A 'adobe':19A 'attack':8A 'code':10A 'cve':13A,16A 'encod':3A 'encoder':21A 'file':5A 'let':7A 'malici':4A 'media':2A,20A 'open':6A 'run':9A 'user':12A","search_b":"'adob':23B,35B 'adobe-media-encod':22B 'arbitrari':65B 'attack':54B 'bound':43B 'cloud':28B 'code':66B 'context':69B 'craft':51B 'creativ':27B 'creative-cloud':26B 'current':72B 'encod':25B,37B 'file':52B,62B 'flaw':45B 'get':56B 'interact':32B 'maco':29B 'media':24B,36B 'open':49B,60B 'out-of-bound':40B 'run':64B 'trigger':46B 'user':31B,73B 'user-interact':30B 'vendor':33B 'victim':58B 'window':34B 'write':44B","search_c":"'affect':77C 'arbitrari':90C 'bound':83C 'code':91C 'context':95C 'could':87C 'current':98C 'encod':75C 'execut':92C 'exploit':100C 'file':115C 'interact':106C 'issu':103C 'malici':114C 'media':74C 'must':111C 'open':112C 'out-of-bound':80C 'requir':104C 'result':88C 'user':99C,105C 'victim':110C 'vulner':85C 'write':84C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T21:18:48+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113545","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113545","severity":null,"published_at":"2026-11-10T21:18:48+00:00","modified_at":"2026-11-10T21:18:48+00:00","first_seen_at":"2026-11-10T21:46:10+00:00","fetched_at":"2026-11-10T21:46:10+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-113545:3023","url":"https://www.adobe.com/trust/security/products/media-encoder/apsb26-103.html","severity":null,"published_at":"2026-11-10T22:40:09+00:00","modified_at":"2026-11-10T22:40:09+00:00","first_seen_at":"2026-11-10T22:40:09+00:00","fetched_at":"2026-11-10T22:40:09+00:00","note":"Read Adobe APSB26-103 (Nov 10 2026): affected/fixed versions; Adobe says not exploited. No PoC or chatter checked; no repo check (version is in installed app).","cites":["https://www.adobe.com/trust/security/products/media-encoder/apsb26-103.html"]}],"documents":[{"id":119285,"url":"https://www.adobe.com/trust/security/products/media-encoder/apsb26-103.html","title":"Adobe Security Bulletin APSB26-103: Media Encoder","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}