Adobe Premiere Pro vulnerabilities

44 CVEs affecting Adobe Premiere Pro, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-34641, published 2026-07-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-35997, published 2021-08-20. High severity, CVSS 7.8. EPSS: 3.9% chance of exploitation in the next 30 days. Adobe Premiere Pro version 15.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to…
CVE-2020-9616, published 2020-06-26. Medium severity, CVSS 5.5. EPSS: 2.7% chance of exploitation in the next 30 days. Adobe Premiere Pro versions 14.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2021-42723, published 2021-11-16. High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days. Adobe Bridge version 11.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted SGI file, which could result in a read past the end of an allocated memory…
CVE-2020-9652, published 2020-06-25. High severity, CVSS 7.8. EPSS: 2.4% chance of exploitation in the next 30 days. Adobe Premiere Pro versions 14.2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2020-9653, published 2020-06-25. High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days. Adobe Premiere Pro versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2020-9654, published 2020-06-25. High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days. Adobe Premiere Pro versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2021-40710, published 2021-09-29. High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days. Adobe Premiere Pro version 15.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .svg file, potentially resulting in arbitrary code execution in…
CVE-2021-40715, published 2021-09-29. High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days. Adobe Premiere Pro version 15.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .exr file, potentially resulting in arbitrary code execution in…
CVE-2021-40792, published 2022-03-16. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. Adobe Premiere Pro version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the…
CVE-2021-40794, published 2022-03-16. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. Adobe Premiere Pro version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the…

Latest

CVE-2026-34641, published 2026-07-31. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction…
CVE-2026-48369, published 2026-07-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction…
CVE-2026-48308, published 2026-07-14. Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days. Premiere Pro is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and…
CVE-2026-48270, published 2026-07-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction…
CVE-2026-48269, published 2026-07-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Premiere Pro is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user…
CVE-2026-34638, published 2026-05-12. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this…
CVE-2026-34637, published 2026-05-12. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
CVE-2026-34636, published 2026-05-12. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
CVE-2026-27269, published 2026-03-10. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Premiere Pro versions 25.5 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An…
CVE-2025-54242, published 2025-09-09. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Premiere Pro versions 25.3, 24.6.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this…