CVE-2026-48367 is an out-of-bounds write vulnerability (CWE-787) in Adobe After Effects that allows an attacker to execute arbitrary code in the context of the current user. Successful exploitation requires the victim to open a crafted malicious file, which triggers the vulnerability. The CVSS 3.1 base score is 7.8, indicating high severity with local attack vector, low attack complexity, no privileges required, but user interaction is necessary. The vulnerability impacts confidentiality, integrity, and availability. No vendor advisory or patch information is currently available to confirm remediation status.

If exploited, this vulnerability could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the affected system's user context. The attack requires user interaction, limiting remote exploitation without user involvement. The vulnerability affects confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources to avoid triggering the vulnerability.