CVE-2026-48308 Details
Description
Premiere Pro is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.
A vulnerability in Adobe Premiere Pro related to improper input validation has been identified, which could lead to a security feature bypass. This issue allows an attacker to circumvent security measures and gain unauthorized write access. The exploitation of this vulnerability depends on conditions beyond the attacker's control, but does not require user interaction. The vulnerability affects Adobe Premiere Pro versions 25.6.5 and earlier, as well as Adobe Premiere versions 26.2.2 and earlier, on both Windows and macOS.
Users are advised to update to Adobe Premiere Pro version 25.6.6 or Adobe Premiere version 26.3. These updates can be downloaded from the Adobe Download Center or via the Creative Cloud desktop app. For IT administrators, Creative Cloud applications can be deployed to end users using the Admin Console.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 16, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://helpx.adobe.com/security/products/premiere_pro/apsb26-76.html | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-20 | Improper Input Validation | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| adobe premiere pro | <= 25.6.5 >= 26.0, <= 26.2.2 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 28, 2026 | CVE Modified | [email protected] |
| Jul 17, 2026 | Initial Analysis | [email protected] |
| Jul 16, 2026 | CVE Modified | CISA-ADP |
| Jul 14, 2026 | New CVE Received | [email protected] |