Back to CVE records
High 7.8Published Sep 9, 2025

CVE-2025-54242Premiere Pro | Use After Free (CWE-416)

Updated under an hour ago ()

Does this affect you?

It affects Adobe Premiere Pro. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Premiere Pro versions 25.3, 24.6.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file, and scope is unchanged.

Free: a daily email for up to 3 products and the weekly digest. No card, no password. By continuing you agree to the Terms and Privacy Policy.

CVSS
7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness (CWE)
CWE-416
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
adobe
NVD analysis
Analyzed
Record last updated
Feb 26, 2026
First seen by InfoSec Signals
Nov 1, 2026

Affected products

Affected products
Adobe Premiere Pro
adobe:premiere_pro (from the name)
through 24.6.5
CNA record
adobe premiere_pro
adobe:premiere_pro
before 24.6.8; from 25.0 before 25.4
NVD

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Essential cookies only, unless you allow a Google ads cookie. See our .