CVE-2026-76191

Published: Sep 8, 2026Modified: Sep 15, 2026

8.2

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Exploitability: 1.5 / Impact: 6.0

Source: psirt@adobe.com (Secondary)

Description

Animate is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Affected (2)

Products: Adobe: Animate

1 product

Configuration A

2 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Adobe Animate	23.0.0 ≤ version < 23.0.17
Adobe Animate	24.0.0 ≤ version < 24.0.14

Running on/with	Platform Versions
Apple Macos	All versions
Microsoft Windows	All versions

Related CWEs

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (1)

https://helpx.adobe.com/security/products/animate/apsb26-132.html

Source: psirt@adobe.com

Vendor Advisory

Timeline

No history available yet.