CVE-2026-48346 | Animate is affected by an Untrusted Search Path vulnerabilit… | CVSS 7.9 HIGH

Description

Animate is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Metadata

CVE ID: CVE-2026-48346
State: PUBLISHED
Assigner: adobe
Reserved: 2026-05-21 15:28 UTC
Published: 2026-07-14 19:53 UTC
Last updated: 2026-07-14 19:53 UTC
Primary CWE: CWE-426
Untrusted Search Path (CWE-426)
Vendor / Product: Adobe / Adobe Animate 2023
Sources: cve.org · NVD

Severity & Metrics

7.9 HIGH CVSS 3.1

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

Affected products (2)

Vendor	Product	Platform	Versions
Adobe	Adobe Animate 2023	—	0 ≤ 23.0.15, 23.0.16
Adobe	Adobe Animate 2024	—	0 ≤ 24.0.13, 24.0.14

Weakness (CWE)

CWE	Source	Description
CWE-426	cna	Untrusted Search Path (CWE-426)

CVSS scores (1)

Score	Severity	Version	Source	Vector
7.9	HIGH	3.1	cna	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

References (1)

https://helpx.adobe.com/security/products/animate/apsb26-83.html