CVE-2021-42266

Adobe Animate version 21.0.9 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious FLA file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@adobe.com

Published

2021-11-18

Last modified

2025-04-23

Weaknesses

CWE-119, CWE-788

Affected products

• Animate (Adobe)

References

• https://helpx.adobe.com/security/products/animate/apsb21-105.html