After Effects versions 25.6 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
References
| Link | Resource |
|---|---|
| https://helpx.adobe.com/security/products/after_effects/apsb26-15.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
11 Feb 2026, 17:39
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Adobe
Microsoft Microsoft windows Apple macos Apple Adobe after Effects |
|
| CPE | cpe:2.3:a:adobe:after_effects:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* |
|
| References | () https://helpx.adobe.com/security/products/after_effects/apsb26-15.html - Vendor Advisory |
10 Feb 2026, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-10 18:16
Updated : 2026-02-11 17:39
NVD link : CVE-2026-21330
Mitre link : CVE-2026-21330
CVE.ORG link : CVE-2026-21330
JSON object : View
Products Affected
microsoft
- windows
apple
- macos
adobe
- after_effects
CWE
CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')