CVE-2026-48308 Premiere Pro | Improper Input Validation (CWE-20)

Medium 5.9 Published 14 Jul 2026 Updated 27 Aug 2026

An attacker can bypass security measures to gain unauthorized write access in Adobe Premiere Pro without user interaction.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2026-48308?

CVE-2026-48308 is a medium-severity vulnerability in Adobe Premiere, published on 14 Jul 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Premiere Pro is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.

Weakness: CWE-20

Which versions are affected by CVE-2026-48308?

It affects 1 product.

Products include Adobe Premiere Pro.

How do I fix CVE-2026-48308?

No fix has been published for CVE-2026-48308 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-48308 being exploited?

There is no known exploitation of CVE-2026-48308 in the wild and no public exploit code.

Sources

Also known as GHSA-7h48-w37q-xrm6.