ADOBE AUDITION · CVE-2026-113551 · Other
FIX → 27.0 · 26.5.3 ✓ verified
Adobe Audition has a Violation of Secure Design Principles flaw (CWE-657, CVSS 8.7) that lets a local low-privileged user gain elevated access, with no user interaction and a changed scope. Adobe fixed it in APSB26-102 on Nov 10 2026 and is not aware of exploitation.
first public Nov 10, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Anyone running Adobe Audition 26.5 or earlier, or 25.6.6 or earlier, on Windows or macOS. The attacker needs local access with a low-privileged account, so shared or multi-user workstations matter most. Machines without Audition installed, or already on 27.0 or 26.5.3, can skip it.
Who cares adobe-audition, desktop, macos, privilege-escalation, windows
25.6.6 or earlier (Windows or macOS)26.5.3Audition is affected by a Violation of Secure Design Principles vulnerability that could result in privilege escalation. A low-privileged attacker could leverage this vulnerability to gain elevated access. Exploitation of this issue does not require user interaction. Scope is changed.
This page as .md · .json · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Upgrade to 27.0 · 26.5.3
26.5.3 on the 26.5 line) via Creative Cloud desktop app / Adobe Download Center25.6.6 and earlier as affected but names no fixed 25.6.x build in this bulletin