CVE-2020-24424: 
Adobe Premiere Pro vulnerability analysis and mitigation

Adobe Premiere Pro version 14.4 and earlier versions were found to contain an uncontrolled search path element vulnerability. The vulnerability was disclosed on October 20, 2020, and was assigned the identifier CVE-2020-24424. This security flaw affects Adobe Premiere Pro installations on both Windows and macOS operating systems (NVD CVE, Adobe Advisory).

The vulnerability is classified as CWE-427 (Uncontrolled Search Path Element) and received a CVSS v3.1 base score of 7.8 (High) from NIST and 7.0 (High) from Adobe Systems. The CVSS vector string is CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local access is required with user interaction (NVD CVE).

If successfully exploited, this vulnerability could result in arbitrary code execution in the context of the current user. The high severity ratings across confidentiality, integrity, and availability indicate that successful exploitation could lead to significant system compromise (NVD CVE).

Exploitation of this vulnerability requires user interaction, specifically that a victim must open a malicious file. The attack complexity is considered low, requiring no privileges for execution (NVD CVE).

Adobe has addressed this vulnerability in versions after Adobe Premiere Pro 14.4. Users are advised to update to the latest version of the software to mitigate this security risk (Adobe Advisory).