CVE-2026-21326
Published: 10 February 2026
Summary
CVE-2026-21326 is a high-severity Use After Free (CWE-416) vulnerability in Adobe After Effects. Its CVSS base score is 7.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked at the 2.9th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 RA-5 (Vulnerability Monitoring and Scanning) and SI-16 (Memory Protection).
Deeper analysis
CVE-2026-21326 is a Use After Free vulnerability (CWE-416) affecting Adobe After Effects versions 25.6 and earlier. The flaw could result in arbitrary code execution in the context of the current user. It has a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and was published on 2026-02-10.
Exploitation requires user interaction, as a victim must open a malicious file. An attacker with local access can provide the file and convince the user to open it, achieving arbitrary code execution with the privileges of the current user, potentially compromising confidentiality, integrity, and availability.
Adobe's security advisory at https://helpx.adobe.com/security/products/after_effects/apsb26-15.html details the vulnerability and mitigation, including recommendations for applying patches to affected versions.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-6374
Vulnerability details
After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must…
more
open a malicious file.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Use-after-free in desktop app enables arbitrary code exec via malicious file opened by user (T1204.002), directly matching client-side exploitation (T1203).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly remediates the Use After Free vulnerability in After Effects versions 25.6 and earlier by requiring timely application of vendor patches referenced in Adobe's APSB26-15 advisory.
Enforces memory protection mechanisms such as ASLR and DEP that comprehensively mitigate Use After Free exploits leading to arbitrary code execution when opening malicious files.
Conducts vulnerability scanning to identify and remediate systems with vulnerable After Effects installations affected by CVE-2026-21326.