CVE-2026-48367 is an out-of-bounds write vulnerability in Adobe After Effects that can lead to arbitrary code execution in the context of the current user. Successful exploitation depends on user interaction, requiring the victim to open a crafted malicious file. The vulnerability is classified under CWE-787 and has a CVSS 3.1 base score of 7.8, indicating high impact on confidentiality, integrity, and availability. No affected versions or patch information are provided, and no known exploits are reported in the wild at this time.

If exploited, this vulnerability could allow an attacker to execute arbitrary code with the privileges of the user running After Effects. This could lead to full compromise of the affected user's environment, including data theft, modification, or denial of service. However, exploitation requires the user to open a malicious file, which limits the attack vector to scenarios involving social engineering or delivery of malicious content.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening files from untrusted sources. Monitor Adobe's security advisories for updates regarding patches or workarounds.