CVE-2026-21330: After Effects | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)
After Effects versions 25.6 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-21330?
CVE-2026-21330 is classified as a critical vulnerability, as it may lead to arbitrary code execution.
How do I fix CVE-2026-21330?
To address CVE-2026-21330, users should update Adobe After Effects to version 25.6.5 or later.
What versions of Adobe After Effects are affected by CVE-2026-21330?
CVE-2026-21330 affects Adobe After Effects versions 25.6 and earlier.
Can CVE-2026-21330 affect my operating system?
CVE-2026-21330 specifically impacts Adobe After Effects and does not directly affect operating systems like macOS or Windows.
What is the nature of the vulnerability in CVE-2026-21330?
CVE-2026-21330 is a type confusion vulnerability that results from accessing a resource using an incompatible type.