CVE-2026-84395: Premiere Pro | Server-Side Request Forgery (SSRF) (CWE-918)
Premiere Pro [NEEDS REVIEW: environment mismatch — product 'Premiere Pro' is only known to appear in the 'Bucket A' bucket but environmenttype 'Desktop' is in the 'Bucket A' bucket. This changes the exploitation clause and/or ATO eligibility — verify before publishing.] is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.
Other sources
Premiere Pro is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed.
— NVD
Affected Software
Event History
Frequently Asked Questions
Does an attacker need prior access to the affected system?
The attack vector is local, so exploitation requires local access to the system. No privileges or user interaction are required.
Is the affected product and environment classification confirmed?
No. The record is flagged for review because the Premiere Pro product classification and the Desktop environment classification are noted as a mismatch; applicability and exploitation details should be verified before publication or remediation decisions.