CVE-2023-48632

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Dec 13, 2023
Updated: Dec 16, 2023
CWE ID 787

Summary

CVE-2023-48632 is a critical vulnerability affecting Adobe After Effects versions 24.0.3 and earlier, as well as 23.6.0 and earlier. This issue involves an out-of-bounds write vulnerability that can lead to arbitrary code execution, granting attackers the ability to run malicious code in the context of the current user. Exploitation of this flaw necessitates user interaction, such as opening a specially crafted file. Users are encouraged to update their software as soon as possible to mitigate the risk of potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share