{"id":"CVE-2026-113558","kind":"vulnerability","aliases":["CVE-2026-113558"],"related":[],"title":"Adobe Audition: malicious file opens lead to code execution","description":"Audition is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.","summary":"Adobe Audition, a desktop audio editor, has an input validation flaw that lets a crafted file run code as the current user. An attacker gets code execution on the victim's computer if the victim opens the malicious file.","severity":"high","cvss":8.6,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Adobe Audition","fixed":["27.0","26.5.3"],"affected":"<= 26.5, <= 25.6.6","ecosystem":"vendor"}],"ecosystems":[],"tags":["adobe-audition","desktop","macos","other","windows"],"not_affected_if":["audition-not-installed","files-from-trusted-sources-only"],"how_to_check":"Open Help > About Adobe Audition (Windows) or Audition > About Adobe Audition (macOS). Exposed if the version is 26.5 or earlier, or 25.6.6 or earlier. Fixed builds are 27.0 and 26.5.3.","fix":"Update Adobe Audition to 27.0, or to 26.5.3 if on the 26.x line (Creative Cloud desktop app or Download Center). Adobe lists no workaround.","status":"open","published_at":"2026-11-10T21:18:49+00:00","first_seen_at":"2026-11-10T21:46:11+00:00","triaged_at":"2026-11-10T21:47:49+00:00","updated_at":"2026-11-10T21:55:38+00:00","category":"other","confidence":0.9,"triage":{"at":"2026-11-10T21:47:49Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Adobe Audition: malicious file opens lead to code execution","impact":"high","summary":"Adobe Audition, a desktop audio editor, has an input validation flaw that lets a crafted file run code as the current user. An attacker gets code execution on the victim's computer if the victim opens the malicious file.","audience":"businesses","category":"other","nicknames":[],"who_cares":["adobe-audition","desktop","windows","macos"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"Code runs as the current user after opening a malicious file","analyst_note":"Find the affected and fixed Audition versions from Adobe's security bulletin; the NVD entry lists none.","how_to_check":"- Check the installed Audition version in Help > About Adobe Audition.\n- unknown","plain_action":"","product_name":"Adobe Audition","needs_analyst":true,"not_affected_if":["audition-not-installed","files-from-trusted-sources-only"],"who_is_affected":"Anyone running Adobe Audition on a desktop who opens files from untrusted sources. The sources do not list affected or fixed versions. Teams that do not use Audition can skip it.","user_interaction":"yes","product_ecosystem":"vendor","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000692,"input_tokens":4550,"output_tokens":474,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the affected and fixed Audition versions from Adobe's security bulletin; the NVD entry lists none.","search":"'-113558':12A,15A '-2026':11A,14A 'adob':1A,19B,25B 'adobe':16A 'adobe-audit':18B 'affect':66C 'arbitrari':77C,95C 'attack':48B,88C 'audio':29B 'audit':2A,20B,26B,64C 'audition':17A 'chang':115C 'code':8A,42B,50B,78C,96C 'comput':56B 'context':82C 'could':74C,89C 'craft':39B 'current':45B,85C 'cve':10A,13A 'desktop':21B,28B 'editor':30B 'execut':9A,51B,79C,94C 'exploit':90C,97C 'file':4A,40B,63B,112C 'flaw':35B 'get':49B 'improp':69C 'input':33B,70C 'interact':103C 'issu':100C 'lead':6A 'let':37B 'maco':22B 'malici':3A,62B,111C 'must':108C 'open':5A,60B,109C 'requir':101C 'result':75C 'run':41B 'scope':113C 'user':46B,86C,102C 'valid':34B,71C 'victim':54B,59B,107C 'vulner':72C,92C 'window':24B","nicknames":[],"mitigations":[],"who_affected":"Anyone running Adobe Audition for Windows or macOS at 26.5 or earlier, or 25.6.6 or earlier, who opens a crafted file; the code then runs as the current user. Adobe says it knows of no exploits in the wild. Teams without Audition installed, or that only open files from trusted sources, can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-10T21:55:38Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/audition/apsb26-102.html","run_id":2885},"products":{"at":"2026-11-10T21:55:38Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/audition/apsb26-102.html","run_id":2885},"how_to_check":{"at":"2026-11-10T21:55:38Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/audition/apsb26-102.html","run_id":2885},"who_affected":{"at":"2026-11-10T21:55:38Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/audition/apsb26-102.html","run_id":2885}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["adobeaudition","audition"],"ptokens":["adobe","audition"],"labels":["adobeaudition","desktop","high","macos","other","windows"],"campaign_type":null,"search_a":"'-113558':12A,15A '-2026':11A,14A 'adob':1A 'adobe':16A 'audit':2A 'audition':17A 'code':8A 'cve':10A,13A 'execut':9A 'file':4A 'lead':6A 'malici':3A 'open':5A","search_b":"'adob':19B,25B 'adobe-audit':18B 'attack':48B 'audio':29B 'audit':20B,26B 'code':42B,50B 'comput':56B 'craft':39B 'current':45B 'desktop':21B,28B 'editor':30B 'execut':51B 'file':40B,63B 'flaw':35B 'get':49B 'input':33B 'let':37B 'maco':22B 'malici':62B 'open':60B 'run':41B 'user':46B 'valid':34B 'victim':54B,59B 'window':24B","search_c":"'affect':66C 'arbitrari':77C,95C 'attack':88C 'audit':64C 'chang':115C 'code':78C,96C 'context':82C 'could':74C,89C 'current':85C 'execut':79C,94C 'exploit':90C,97C 'file':112C 'improp':69C 'input':70C 'interact':103C 'issu':100C 'malici':111C 'must':108C 'open':109C 'requir':101C 'result':75C 'scope':113C 'user':86C,102C 'valid':71C 'victim':107C 'vulner':72C,92C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T21:18:49+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113558","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113558","severity":null,"published_at":"2026-11-10T21:18:49+00:00","modified_at":"2026-11-10T21:18:49+00:00","first_seen_at":"2026-11-10T21:46:11+00:00","fetched_at":"2026-11-10T21:46:11+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-113558:2885","url":"https://www.adobe.com/trust/security/products/audition/apsb26-102.html","severity":null,"published_at":"2026-11-10T21:55:38+00:00","modified_at":"2026-11-10T21:55:38+00:00","first_seen_at":"2026-11-10T21:55:38+00:00","fetched_at":"2026-11-10T21:55:38+00:00","note":"Adobe APSB26-102 (Nov 10 2026): affected 26.5 and earlier, 25.6.6 and earlier; fixed 27.0 / 26.5.3. No exploitation known per Adobe.","cites":["https://www.adobe.com/trust/security/products/audition/apsb26-102.html"]}],"documents":[{"id":119325,"url":"https://www.adobe.com/trust/security/products/audition/apsb26-102.html","title":"Adobe APSB26-102: Security update available for Adobe Audition","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}