Is CVE-2026-21313 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-21313 being exploited in the wild.

How severe is CVE-2026-21313?

Medium severity, with a CVSS score of 5.5, published 10 February 2026.

Which products and versions are affected?

Adobe Audition 25.3 and earlier.

Is there a fix for CVE-2026-21313?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-21313 attacked?

It is attacked with local access.

Am I affected by CVE-2026-21313?

Check whether you run Adobe Audition at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-21313: Adobe Audition out-of-bounds read in memory access

CVE-2026-21313 · Severity: medium · CVSS 5.5 · Published 2026-02-10

Adobe Audition, a professional audio editing application, contains an out-of-bounds read vulnerability that could allow attackers to access sensitive information stored in memory. The flaw requires a user to open a malicious file, making it a user-interaction-dependent attack. Successful exploitation could result in disclosure of sensitive data such as credentials or project information.

Technologies: Adobe Audition. Vendors: Adobe.

Quick answers

Is CVE-2026-21313 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-21313 being exploited in the wild.
How severe is CVE-2026-21313?: Medium severity, with a CVSS score of 5.5, published 10 February 2026.
Which products and versions are affected?: Adobe Audition 25.3 and earlier.
Is there a fix for CVE-2026-21313?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-21313 attacked?: It is attacked with local access.
Am I affected by CVE-2026-21313?: Check whether you run Adobe Audition at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This is an out-of-bounds read vulnerability in Adobe Audition versions 25.3 and earlier. The vulnerability allows an attacker to read memory beyond the intended boundaries of a buffer, potentially exposing sensitive data. The attack requires user interaction—a victim must open a crafted malicious file to trigger the vulnerability. No network connectivity or elevated privileges are needed. An attacker can leverage this to disclose sensitive information residing in application memory. A patch is expected from Adobe; users should update to versions later than 25.3 when available.

Affected products

Adobe Audition 25.3 and earlier

Timeline

2026-02-10: disclosed: CVE-2026-21313 published

References

https://helpx.adobe.com/security/products/audition/apsb26-14.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.