CVE-2024-47442
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2024-47442 is a newly disclosed vulnerability affecting Adobe After Effects versions 23.6.9 and earlier, as well as 24.6.2. This issue represents an out-of-bounds write vulnerability, which if exploited, could lead to arbitrary code execution. The threat actor requires user interaction to execute an attack, meaning a victim must open a maliciously crafted file to be at risk. Successful exploitation of this vulnerability allows the attacker to run code with the same privileges as the current user. Users are strongly urged to update their software as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Adobe After Effects
Affected Vendors
- Adobe