CVE-2026-48308

{
  "id": "CVE-2026-48308",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-14T21:16:58.153",
  "lastModified": "2026-10-24T21:10:00.130",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Premiere Pro is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed."
    },
    {
      "lang": "es",
      "value": "Premiere Pro está afectado por una vulnerabilidad de validación de entrada incorrecta que podría resultar en una omisión de característica de seguridad. Un atacante podría aprovechar esta vulnerabilidad para omitir medidas de seguridad y obtener acceso de escritura no autorizado. El exploit depende de condiciones fuera del control del atacante. La explotación de este problema no requiere interacción del usuario. El alcance ha cambiado."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Adobe",
          "product": "Premiere",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThanOrEqual": "26.2.2",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "26.3",
              "versionType": "semver",
              "status": "unaffected"
            }
          ]
        },
        {
          "vendor": "Adobe",
          "product": "Premiere",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThanOrEqual": "25.6.5",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "25.6.6",
              "versionType": "semver",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
          "baseScore": 5.9,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "HIGH",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "CHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.4,
        "impactScore": 4.0
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-16T14:52:58.103208Z",
          "id": "CVE-2026-48308",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:adobe:premiere_pro:*:*:*:*:*:*:*:*",
              "versionEndIncluding": "25.6.5",
              "matchCriteriaId": "AABDFFAD-B59E-4053-817C-327B71A10991"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:adobe:premiere_pro:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "26.0",
              "versionEndIncluding": "26.2.2",
              "matchCriteriaId": "CABCB9F6-8F34-41B4-AA66-469320E6F097"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://helpx.adobe.com/security/products/premiere_pro/apsb26-76.html",
      "source": "[email protected]",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}