{"id":"CVE-2026-113547","kind":"vulnerability","aliases":["CVE-2026-113547"],"related":[],"title":"Adobe Media Encoder: out-of-bounds write lets a malicious file run code","description":"Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","summary":"Adobe Media Encoder has an out-of-bounds write (CWE-787, CVSS 7.8) that runs code as the current user when someone opens a crafted file. Fixed in APSB26-103; Adobe knows of no exploitation.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Adobe Media Encoder","fixed":["27.0","26.5.3"],"affected":"<= 26.5.2, <= 25.6.6","ecosystem":"vendor"}],"ecosystems":[],"tags":["adobe-media-encoder","creative-cloud","macos","other","user-interaction","windows"],"not_affected_if":["no-untrusted-files","patched-26.5.3","patched-27.0"],"how_to_check":"Open Adobe Media Encoder, Help > About (or Creative Cloud desktop app). Affected: 26.5.2 and earlier, or 25.6.6 and earlier. Fixed: 27.0 or 26.5.3.","fix":"Update Adobe Media Encoder to 27.0 (or 26.5.3 on the 26.x line; 25.6.6 and earlier also listed as affected, Adobe lists 27.0 and 26.5.3 as updated versions) via the Download Center.","status":"open","published_at":"2026-11-10T21:18:48+00:00","first_seen_at":"2026-11-10T21:46:10+00:00","triaged_at":"2026-11-10T21:48:04+00:00","updated_at":"2026-11-10T21:56:44+00:00","category":"other","confidence":0.9,"triage":{"at":"2026-11-10T21:48:04Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Adobe Media Encoder: out-of-bounds write lets a malicious file run code","impact":"high","summary":"Adobe Media Encoder has an out-of-bounds write flaw that can be triggered by opening a crafted file. A successful attack runs arbitrary code as the current user.","audience":"businesses","category":"other","nicknames":[],"who_cares":["adobe-media-encoder","creative-cloud"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Arbitrary code runs as the logged-in user after a file is opened","analyst_note":"Find Adobe's security bulletin for affected and fixed Media Encoder versions; the NVD entry lists none.","how_to_check":"- Open Adobe Media Encoder and check its version under Help > About, then compare with the versions in the sources (none listed).\n- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-untrusted-files"],"who_is_affected":"Anyone who runs Adobe Media Encoder and opens media files from untrusted sources is exposed, since the attack needs a victim to open a malicious file. The sources do not list affected versions, so the exact range is unknown. Systems that never open untrusted media files are less exposed.","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000697,"input_tokens":4525,"output_tokens":489,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find Adobe's security bulletin for affected and fixed Media Encoder versions; the NVD entry lists none.","search":"'-103':67B '-113547':17A,20A '-2026':16A,19A '-787':48B '7.8':50B 'adob':1A,25B,37B,68B 'adobe':21A 'adobe-media-encod':24B 'affect':76C 'apsb26':66B 'arbitrari':89C 'bound':7A,45B,82C 'cloud':30B 'code':14A,53B,90C 'context':94C 'could':86C 'craft':62B 'creativ':29B 'creative-cloud':28B 'current':56B,97C 'cve':15A,18A 'cvss':49B 'cwe':47B 'encod':3A,27B,39B,74C 'encoder':23A 'execut':91C 'exploit':72B,99C 'file':12A,63B,114C 'fix':64B 'interact':35B,105C 'issu':102C 'know':69B 'let':9A 'maco':31B 'malici':11A,113C 'media':2A,22A,26B,38B,73C 'must':110C 'open':60B,111C 'out-of-bound':4A,42B,79C 'requir':103C 'result':87C 'run':13A,52B 'someon':59B 'user':34B,57B,98C,104C 'user-interact':33B 'victim':109C 'vulner':84C 'window':36B 'write':8A,46B,83C","nicknames":[],"mitigations":[],"who_affected":"Anyone who runs Adobe Media Encoder and opens media files from untrusted sources is exposed, since the attack needs a victim to open a malicious file. The sources do not list affected versions, so the exact range is unknown. Systems that never open untrusted media files are less exposed.","tier":"B","verified":{"fix":{"at":"2026-11-10T21:56:44Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/media-encoder/apsb26-103.html","run_id":2890},"products":{"at":"2026-11-10T21:56:44Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/media-encoder/apsb26-103.html","run_id":2890},"how_to_check":{"at":"2026-11-10T21:56:44Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/media-encoder/apsb26-103.html","run_id":2890},"who_affected":{"at":"2026-11-10T21:56:44Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/media-encoder/apsb26-103.html","run_id":2890}},"analyst_revisit_at":null,"fix_status":"none","audience":"developers","plain_action":null,"pkeys":["adobemediaencoder","mediaencoder"],"ptokens":["adobe","encoder","media"],"labels":["adobemediaencoder","creativecloud","high","macos","other","userinteraction","windows"],"campaign_type":null,"search_a":"'-113547':17A,20A '-2026':16A,19A 'adob':1A 'adobe':21A 'bound':7A 'code':14A 'cve':15A,18A 'encod':3A 'encoder':23A 'file':12A 'let':9A 'malici':11A 'media':2A,22A 'out-of-bound':4A 'run':13A 'write':8A","search_b":"'-103':67B '-787':48B '7.8':50B 'adob':25B,37B,68B 'adobe-media-encod':24B 'apsb26':66B 'bound':45B 'cloud':30B 'code':53B 'craft':62B 'creativ':29B 'creative-cloud':28B 'current':56B 'cvss':49B 'cwe':47B 'encod':27B,39B 'exploit':72B 'file':63B 'fix':64B 'interact':35B 'know':69B 'maco':31B 'media':26B,38B 'open':60B 'out-of-bound':42B 'run':52B 'someon':59B 'user':34B,57B 'user-interact':33B 'window':36B 'write':46B","search_c":"'affect':76C 'arbitrari':89C 'bound':82C 'code':90C 'context':94C 'could':86C 'current':97C 'encod':74C 'execut':91C 'exploit':99C 'file':114C 'interact':105C 'issu':102C 'malici':113C 'media':73C 'must':110C 'open':111C 'out-of-bound':79C 'requir':103C 'result':87C 'user':98C,104C 'victim':109C 'vulner':84C 'write':83C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T21:18:48+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113547","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113547","severity":null,"published_at":"2026-11-10T21:18:48+00:00","modified_at":"2026-11-10T21:18:48+00:00","first_seen_at":"2026-11-10T21:46:10+00:00","fetched_at":"2026-11-10T21:46:10+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-113547:2890","url":"https://www.adobe.com/trust/security/products/media-encoder/apsb26-103.html","severity":null,"published_at":"2026-11-10T21:56:44+00:00","modified_at":"2026-11-10T21:56:44+00:00","first_seen_at":"2026-11-10T21:56:44+00:00","fetched_at":"2026-11-10T21:56:44+00:00","note":"Adobe APSB26-103 (Nov 10 2026) read directly: affected 26.5.2 and earlier, 25.6.6 and earlier; fixed 27.0 / 26.5.3; no known exploitation.","cites":["https://www.adobe.com/trust/security/products/media-encoder/apsb26-103.html"]}],"documents":[{"id":119285,"url":"https://www.adobe.com/trust/security/products/media-encoder/apsb26-103.html","title":"Adobe Security Bulletin APSB26-103: Media Encoder","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}