CVE-2020-3765

—

CVSS 3.1

9.8 critical

EPSS

6%p93

Published

Feb 20, 2020 (Feb 20, 2020)

Modified

Jun 17, 2026

Description

Adobe After Effects versions 16.1.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendors: adobe
Products: after effects
Weakness: CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.9%)

In the news2 stories

Adobe released out-of-band updates for After Effects and Media Encoder

Security AffairsFeb 20, 15:36 UTC · Feb 20, 2020Vulnerability CVE-2020-3765 CVE-2020-3764

Adobe Patches Critical Bugs Affecting Media Encoder and After Effects

The Hacker NewsFeb 20, 10:09 UTC · Feb 20, 2020Vulnerability in the wildCVE-2020-3765 CVE-2020-3764