Skip to content
AdobeCVE-2026-48350

Adobe Animate: path traversal

High8.6CVE-2026-48350 · Published Jul 14, 2026 · updated Aug 28, 2026

Animate is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to access sensitive files or directories outside the intended restrictions. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Adobe advisory

Affected versions

PackageAffectedFixed in
Adobe Animate 2023
Product
<= 23.0.15No fix yet
Adobe Animate 2024
Product
<= 24.0.13No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-22

More Adobe advisories

All Adobe
Advisory
Adobe Illustrator Desktop: out-of-bounds write
High7.8Jul 14
Adobe Content Credentials: improper input validation
High7.5Jul 14
Adobe Content Credentials: improper input validation
High7.5Jul 14
Adobe Content Credentials: improper input validation
Medium5.5Jul 14
Adobe Content Credentials: integer overflow
Medium6.2Jul 14
Adobe Content Credentials: resource exhaustion
Medium6.2Jul 14

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.