ADOBE AUDITION · CVE-2026-113562 · Other
FIX → 27.0 · 26.5.3 ✓ verified
Adobe Audition has an improper input validation flaw (CWE-20) that lets a crafted file run code as the current user when the victim opens it. Fixed in Audition 27.0 and 26.5.3 (APSB26-102); Adobe is not aware of exploitation.
first public Nov 10, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Users who run Adobe Audition and open files from untrusted sources. The sources do not list affected versions, so the exact range is unknown.
Not affected if no-audition-installed
Who cares adobe-audition, macos, user-interaction, windows
25.6.6 and earlier, on Windows and macOS26.5.3Upgrade to 27.0 · 26.5.3
Update Adobe Audition to 27.0 (or on the 26.x line) via Creative Cloud desktop app; 25.6.x branch listed as affected up to , Adobe's bulletin lists fixed builds 27.0 and only
Audition is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
This page as .md · .json · CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
26.5.325.6.626.5.3