CVE-2026-21329
Published: 10 February 2026
Summary
CVE-2026-21329 is a high-severity Use After Free (CWE-416) vulnerability in Adobe After Effects. Its CVSS base score is 7.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked at the 2.9th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-2 (Flaw Remediation) and SI-16 (Memory Protection).
Deeper analysis
CVE-2026-21329 is a Use After Free vulnerability (CWE-416) affecting Adobe After Effects versions 25.6 and earlier. The flaw could result in arbitrary code execution in the context of the current user. It carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and was published on 2026-02-10.
Exploitation requires user interaction, as a victim must open a malicious file in the affected software. An attacker with local access and no special privileges can craft and deliver such a file, leading to arbitrary code execution with the privileges of the current user upon opening.
Adobe's security bulletin APSB26-15 provides details on the vulnerability and mitigation, available at https://helpx.adobe.com/security/products/after_effects/apsb26-15.html.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-6370
Vulnerability details
After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must…
more
open a malicious file.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Use-after-free in client app enables arbitrary code execution via malicious file opened by user (T1204.002); directly matches Exploitation for Client Execution (T1203).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly mitigates the Use After Free vulnerability by requiring timely identification, reporting, and patching of the flaw in Adobe After Effects versions 25.6 and earlier.
Implements memory protection mechanisms like ASLR and DEP that raise the bar for successful arbitrary code execution via Use After Free exploits.
Scans and eradicates malicious files at entry points or in real-time before opening in After Effects, potentially blocking crafted exploit files.