CVE-2026-48349
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
An Incorrect Authorization vulnerability in Animate could allow arbitrary code execution in the context of the current user. Exploitation does not require user interaction but depends on conditions beyond the attacker's control. The scope of the vulnerability has changed.
Risk Assessment
The risk involves an attacker potentially gaining control over the user's workstation, which could lead to data theft, malware installation, or lateral movement within the internal network.
Recommendation
It is recommended to immediately update Animate to the latest version provided by the vendor. Additionally, restrict user privileges and monitor systems for unusual activity.
Other vulnerabilities in Adobe Animate
Original NVD description (English source)
Animate is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.