First published: Mon Dec 20 2021(Updated: )
Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious MXF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
Credit: psirt@adobe.com psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Premiere Rush | <=1.5.16 | |
Microsoft Windows | ||
All of | ||
Adobe Premiere Rush | <=1.5.16 | |
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for the Adobe Premiere Rush vulnerability is CVE-2021-43026.
The severity level of CVE-2021-43026 is critical, with a CVSS score of 7.8.
CVE-2021-43026 can allow arbitrary code execution in the context of the current user when a malicious MXF file is processed in Adobe Premiere Rush version 1.5.16 and earlier.
Adobe Premiere Rush versions up to and including 1.5.16 are affected by CVE-2021-43026.
No, Microsoft Windows is not affected by CVE-2021-43026.