Description
Animate is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Adobe | Adobe Animate 2023 | ≤ 23.0.16 | 23.0.17 |
| Adobe | Adobe Animate 2024 | ≤ 24.0.14 | 24.0.15 |
Advisories 1
- WID-SEC-2026-3247 Adobe Creative Cloud (Illustrator und Animate): Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Sep 8, 2026