Animate 2027 (27.0.0.33) crashes on every launch — 0xC0000005 null-vtable call at dvacore.dll+0x242FA2

Hi everyone,

I'm a beginner with Animate, and I'm posting this with AI assistance. All the technical data below was captured and analysed from my own machine, where this crash happens 100% of the time.

Animate 2027 (27.0.0.33) crashes on every single launch, ~20 seconds after startup, with no user interaction at all. The workspace never finishes loading — the menu bar renders but Tools / Timeline / Properties stay blank, a "Introducing Turntable" promo card appears, then the process dies.

Crash signature (identical every time):

Faulting module : dvacore.dll, version 26.4.0.33 Exception code : 0xC0000005 Fault offset : 0x0000000000242fa2 Exit code : 0xC0000005

Disassembly of the faulting path in dvacore.dll (PE32+, ImageBase 0x180000000, .text VA 0x1000 / raw 0x400; RVA 0x242FA2 -> file offset 0x2423A2):

RVA 0x242F92 mov rcx, [rbx+0x38] ; member pointer RVA 0x242F9A mov rax, [rcx] ; rax = vtable -> reads NULL RVA 0x242F9F cmp rcx, rbx RVA 0x242FA2 call qword ptr [rax+0x20] ; <-- 0xC0000005 RVA 0x242FA5 mov [rbx+0x38], rbp ; clear member (never reached) RVA 0x242FA9 add rbx, 0x40 RVA 0x242FAD cmp rbx, rdi RVA 0x242FB0 jne 0x242F92

This is a cleanup loop that walks a singly-linked list (stride 0x40, member at +0x38) and invokes a virtual function on each entry. At least one object has already been destroyed (its vtable pointer is zero) while still present in the list — i.e. a use-after-free / double-destruction. There is no null check on the vtable pointer, so it faults instead of degrading gracefully.

Right before the crash, the CEP layer logs:

ERROR evalScript: PlugPlugErrorCode_evalScriptCallbackFailed (EvalRawScript: Failed to evaluate script for engine <com.adobe.flash.GuidedTutorial_Engine_Id>) ERROR getCurrentImsUserId: Unknown Exception occured

and PlugPlug contains this teardown logic string:

HtmlService::UnloadAllExtensions(): PrepareUnload() needs to wait for eval script completion

Working theory based on the logs: the com.adobe.flash.GuidedTutorial CEP panel (extension bundle "Coachmark") fails its evalScript during PrepareLoad, is left half-constructed, and is later hit by HtmlService::UnloadAllExtensions() during teardown -> null-vtable call.

What has already been ruled out:

• Full uninstall + clean reinstall of 27.0.0.33 -> same offset, every time
• Disabled / renamed / stub-shadowed every CEP extension -> still crashes
• NVIDIA discrete GPU and Intel integrated GPU -> both crash
• Reset all preferences (%APPDATA%\Adobe\Animate\2027) -> still crashes
• Cleared proxy config, removed third-party leftovers -> no change
• No DLL injection: AppInit_DLLs empty, no AppCompatFlags Layers entry for Animate.exe

Environment: OS : Windows 11 Home China 26H2, build 10.0.26300.9974 CPU : Intel Core Ultra 7 251HX GPU : NVIDIA RTX 5060 Laptop + Intel Graphics Locale : zh_CN PlugPlug: 12.0.0.14 (CSXS.12)

One more thing that may matter: an Animate 27.0.0 host is shipping dvacore.dll version 26.4.0.33. Could someone confirm that packaging is intentional?

Since Animate is now in maintenance mode, I would really appreciate knowing:

1. Is this crash known / being looked at?
2. Is there any supported workaround short of downgrading to Animate 2026?

Crash dumps, verbose CEP logs (LogLevel=6) and the WER report can be supplied on request — please just tell me which files you need and where to upload them.

（我是中文用户，上文的英文是在 AI 协助下整理的，技术数据均来自我这台机器的实际排查结果。）

Thanks!