Adobe After Effects vulnerabilities

127 CVEs affecting Adobe After Effects, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-48367, published 2026-07-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-9638, published 2020-06-25. High severity, CVSS 7.8. EPSS: 8.7% chance of exploitation in the next 30 days. Adobe After Effects versions 17.1 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2020-9637, published 2020-06-25. High severity, CVSS 7.8. EPSS: 8.4% chance of exploitation in the next 30 days. Adobe After Effects versions 17.1 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2021-28608, published 2021-08-24. High severity, CVSS 7.8. EPSS: 5.9% chance of exploitation in the next 30 days. Adobe After Effects version 18.2 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this…
CVE-2021-28606, published 2021-08-24. High severity, CVSS 7.8. EPSS: 5.9% chance of exploitation in the next 30 days. Adobe After Effects version 18.2 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this…
CVE-2021-28610, published 2021-08-24. High severity, CVSS 7.8. EPSS: 5.7% chance of exploitation in the next 30 days. Adobe After Effects version 18.2 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this…
CVE-2020-3765, published 2020-02-20. Critical severity, CVSS 9.8. EPSS: 5.6% chance of exploitation in the next 30 days. Adobe After Effects versions 16.1.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2021-28604, published 2021-08-24. High severity, CVSS 7.8. EPSS: 5.3% chance of exploitation in the next 30 days. Adobe After Effects version 18.2 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this…
CVE-2021-28603, published 2021-08-24. High severity, CVSS 7.8. EPSS: 5.3% chance of exploitation in the next 30 days. Adobe After Effects version 18.2 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this…
CVE-2022-24096, published 2022-03-11. High severity, CVSS 7.8. EPSS: 3.9% chance of exploitation in the next 30 days. Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by an Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of…
CVE-2022-24095, published 2022-03-11. High severity, CVSS 7.8. EPSS: 3.9% chance of exploitation in the next 30 days. Adobe After Effects versions 22.2 (and earlier) and 18.4.4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of…

Latest

CVE-2026-48367, published 2026-07-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user…
CVE-2026-48274, published 2026-07-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. After Effects is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user…
CVE-2026-34690, published 2026-05-12. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. After Effects is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user…
CVE-2026-34644, published 2026-05-12. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. After Effects versions 26.0, 25.6.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.…
CVE-2026-34643, published 2026-05-12. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. After Effects versions 26.0, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
CVE-2026-34642, published 2026-05-12. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. After Effects versions 26.0, 25.6.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.…
CVE-2026-21351, published 2026-02-10. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…
CVE-2026-21350, published 2026-02-10. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. After Effects versions 25.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to…
CVE-2026-21330, published 2026-02-10. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. After Effects versions 25.6 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of…
CVE-2026-21329, published 2026-02-10. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…