{"id":"CVE-2026-113565","kind":"vulnerability","aliases":["CVE-2026-113565"],"related":[],"title":"Adobe Audition: malicious file opens a memory write that runs code","description":"Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","summary":"Adobe Audition has an out-of-bounds write flaw that a crafted file can trigger. A victim who opens the malicious file lets an attacker run code as the current user.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Adobe Audition","fixed":["27.0","26.5.3"],"affected":"<= 26.5, <= 25.6.6","ecosystem":"vendor"}],"ecosystems":[],"tags":["adobe-audition","creative-software","macos","package","user-interaction","windows"],"not_affected_if":["audition-not-installed"],"how_to_check":"In Audition, Help > About Audition shows the version (macOS: Audition > About Audition). Affected: 26.5 and earlier, and 25.6.6 and earlier. Fixed: 27.0 and 26.5.3. In Creative Cloud desktop, the Audition entry shows the installed version.","fix":"Update Adobe Audition to 27.0 (or 26.5.3 on the 26.x line) via Creative Cloud or the Download Center.","status":"open","published_at":"2026-11-10T21:18:50+00:00","first_seen_at":"2026-11-10T21:46:13+00:00","triaged_at":"2026-11-10T21:48:01+00:00","updated_at":"2026-11-10T21:54:39+00:00","category":"package","confidence":0.9,"triage":{"at":"2026-11-10T21:48:01Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"Adobe Audition: malicious file opens a memory write that runs code","impact":"high","summary":"Adobe Audition has an out-of-bounds write flaw that a crafted file can trigger. A victim who opens the malicious file lets an attacker run code as the current user.","audience":"everyone","category":"package","nicknames":[],"who_cares":["adobe-audition","creative-software","windows","macos"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker runs code as the logged-in user after a file is opened.","analyst_note":"Find affected version ranges and the fixed version from the NVD entry or Adobe's security bulletin for CVE-2026-113565.","how_to_check":"- Open Audition and check its version under Help > About, or look at the installed version in the application folder.\n- unknown","plain_action":"If you use Adobe Audition, update it to the latest version from Adobe and avoid opening audio files from unknown sources until you have.","product_name":"Adobe Audition","needs_analyst":true,"not_affected_if":["audition-not-installed"],"who_is_affected":"Anyone who opens a crafted file in Adobe Audition is exposed; the sources do not list affected version ranges. unknown for who can skip it beyond not running Audition.","user_interaction":"yes","product_ecosystem":"vendor","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000707,"input_tokens":4520,"output_tokens":509,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find affected version ranges and the fixed version from the NVD entry or Adobe's security bulletin for CVE-2026-113565.","search":"'-113565':14A,17A '-2026':13A,16A 'adob':1A,21B,32B 'adobe':18A 'adobe-audit':20B 'affect':66C 'arbitrari':79C 'attack':57B 'audit':2A,22B,33B,64C 'audition':19A 'bound':39B,72C 'code':11A,59B,80C 'context':84C 'could':76C 'craft':44B 'creativ':24B 'creative-softwar':23B 'current':62B,87C 'cve':12A,15A 'execut':81C 'exploit':89C 'file':4A,45B,54B,104C 'flaw':41B 'interact':30B,95C 'issu':92C 'let':55B 'maco':26B 'malici':3A,53B,103C 'memori':7A 'must':100C 'open':5A,51B,101C 'out-of-bound':36B,69C 'packag':27B 'requir':93C 'result':77C 'run':10A,58B 'softwar':25B 'trigger':47B 'user':29B,63B,88C,94C 'user-interact':28B 'victim':49B,99C 'vulner':74C 'window':31B 'write':8A,40B,73C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Adobe Audition on Windows or macOS at 26.5 or earlier, or 25.6.6 or earlier, is exposed: opening a crafted file can run code as the logged-in user. Adobe reports no exploitation in the wild. Teams that do not have Audition installed can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-10T21:54:39Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/audition/apsb26-102.html","run_id":2881},"products":{"at":"2026-11-10T21:54:39Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/audition/apsb26-102.html","run_id":2881},"how_to_check":{"at":"2026-11-10T21:54:39Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/audition/apsb26-102.html","run_id":2881},"who_affected":{"at":"2026-11-10T21:54:39Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/audition/apsb26-102.html","run_id":2881}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":"If you use Adobe Audition, update it to the latest version from Adobe and avoid opening audio files from unknown sources until you have.","pkeys":["adobeaudition","audition"],"ptokens":["adobe","audition"],"labels":["adobeaudition","creativesoftware","high","macos","package","userinteraction","windows"],"campaign_type":null,"search_a":"'-113565':14A,17A '-2026':13A,16A 'adob':1A 'adobe':18A 'audit':2A 'audition':19A 'code':11A 'cve':12A,15A 'file':4A 'malici':3A 'memori':7A 'open':5A 'run':10A 'write':8A","search_b":"'adob':21B,32B 'adobe-audit':20B 'attack':57B 'audit':22B,33B 'bound':39B 'code':59B 'craft':44B 'creativ':24B 'creative-softwar':23B 'current':62B 'file':45B,54B 'flaw':41B 'interact':30B 'let':55B 'maco':26B 'malici':53B 'open':51B 'out-of-bound':36B 'packag':27B 'run':58B 'softwar':25B 'trigger':47B 'user':29B,63B 'user-interact':28B 'victim':49B 'window':31B 'write':40B","search_c":"'affect':66C 'arbitrari':79C 'audit':64C 'bound':72C 'code':80C 'context':84C 'could':76C 'current':87C 'execut':81C 'exploit':89C 'file':104C 'interact':95C 'issu':92C 'malici':103C 'must':100C 'open':101C 'out-of-bound':69C 'requir':93C 'result':77C 'user':88C,94C 'victim':99C 'vulner':74C 'write':73C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T21:18:50+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113565","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113565","severity":null,"published_at":"2026-11-10T21:18:50+00:00","modified_at":"2026-11-10T21:18:50+00:00","first_seen_at":"2026-11-10T21:46:13+00:00","fetched_at":"2026-11-10T21:46:13+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-113565:2881","url":"https://www.adobe.com/trust/security/products/audition/apsb26-102.html","severity":null,"published_at":"2026-11-10T21:54:39+00:00","modified_at":"2026-11-10T21:54:39+00:00","first_seen_at":"2026-11-10T21:54:39+00:00","fetched_at":"2026-11-10T21:54:39+00:00","note":"Read Adobe APSB26-102 (Nov 10 2026): CVE listed, OOB write CWE-787, affected 26.5 and earlier / 25.6.6 and earlier, fixed 27.0 and 26.5.3; no known exploitation per Adobe. No repo-readable check (desktop app).","cites":["https://www.adobe.com/trust/security/products/audition/apsb26-102.html","https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-adobe-products-could-allow-for-arbitrary-code-execution_2026-130"]}],"documents":[{"id":119325,"url":"https://www.adobe.com/trust/security/products/audition/apsb26-102.html","title":"Adobe APSB26-102: Security update available for Adobe Audition","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":119329,"url":"https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-adobe-products-could-allow-for-arbitrary-code-execution_2026-130","title":"MS-ISAC advisory 2026-130: Adobe products","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}