---
id: "CVE-2026-113563"
page: "https://infrastack.ai/live/CVE-2026-113563"
kind: "vulnerability"
aliases: ["CVE-2026-113563"]
title: "Adobe Audition: opening a malicious file runs arbitrary code as the user"
severity: "high"
cvss: 8.6
epss: null
exploited: false
status: "open"
category: "other"
products: [{"name": "Adobe Audition", "fixed": ["26.5.3", "27.0"], "affected": ">= 26.0, <= 26.5; <= 25.6.6", "ecosystem": "vendor"}]
ecosystems: []
tags: ["adobe-audition", "macos", "other", "user-interaction", "windows"]
not_affected_if: ["audition-not-installed"]
published_at: "2026-11-10T21:18:50+00:00"
first_seen_at: "2026-11-10T21:46:13+00:00"
updated_at: "2026-11-10T21:54:38+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-113563", "first_seen_at": "2026-11-10T21:46:13+00:00"}, {"source": "analyst", "url": "https://www.adobe.com/trust/security/products/audition/apsb26-102.html", "first_seen_at": "2026-11-10T21:54:38+00:00", "cites": ["https://www.adobe.com/trust/security/products/audition/apsb26-102.html"]}]
exploit_sources: []
---

# Adobe Audition: opening a malicious file runs arbitrary code as the user

Link for people: https://infrastack.ai/live/CVE-2026-113563 (this .md is for agents)

Adobe Audition has a Violation of Secure Design Principles flaw (CWE-657, CVSS 8.6) that can lead to arbitrary code execution as the current user when the victim opens a crafted file. Adobe's bulletin APSB26-102 says it is not aware of exploits in the wild. It does not name the file types that trigger it.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Adobe Audition affected >= 26.0, <= 26.5; <= 25.6.6 fixed 26.5.3, 27.0

## How to check

In Audition open Help > About Audition (or check Creative Cloud desktop). Exposed if the version is 26.5 or earlier on the 26.x line, or 25.6.6 or earlier on the 25.x line.

## Fix

Update to Adobe Audition 27.0, or 26.5.3 if staying on the 26.x line, via Creative Cloud or the Download Center.

## Timeline

- 2026-11-10T21:46:13+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-113563
- 2026-11-10T21:54:38+00:00 analyst https://www.adobe.com/trust/security/products/audition/apsb26-102.html — Read Adobe APSB26-102 (Nov 10 2026): affected 26.5 and earlier, 25.6.6 and earlier; fixed 27.0 / 26.5.3. No exploitation known per Adobe; file types not stated.

## Documents

- [advisory] Adobe APSB26-102: Security update available for Adobe Audition https://www.adobe.com/trust/security/products/audition/apsb26-102.html

## From the sources

Audition is affected by a Violation of Secure Design Principles vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_