Adobe Premiere Pro is affected by an out-of-bounds write vulnerability that poses a risk of arbitrary code execution for local users.

This vulnerability is an out-of-bounds write flaw caused by improper memory handling. While the attack requires user interaction, a successful exploit allows an attacker to execute code as the current user.

The potential for arbitrary code execution presents a significant threat to endpoint security. An attacker who successfully exploits this vulnerability could compromise the confidentiality, integrity, and availability of the host system. With a CVSS score of 7.8, this is classified as a high-severity issue that could lead to full system compromise if the user is operating with elevated privileges.

Immediate Action: Update Adobe Premiere to version 26.3 or 25.6.6 or later to address this vulnerability.

Proactive Monitoring: Monitor system logs for unusual process execution patterns or unexpected file system modifications initiated by the Premiere application.

Compensating Controls: Ensure that users operate with the principle of least privilege to limit the potential impact of arbitrary code execution should an exploit succeed.

Public Exploit Available: No

Given the high CVSS score, administrators should prioritize patching Adobe Premiere across all workstations. Promptly applying the vendor-supplied updates is the only effective way to neutralize the risk of arbitrary code execution associated with this out-of-bounds write vulnerability.