CVE-2026-83963 is an out-of-bounds write vulnerability in Adobe Substance3D - Modeler that allows an attacker to execute arbitrary code in the context of the current user. Successful exploitation depends on user interaction, as the victim must open a crafted malicious file. The vulnerability affects all versions from 0 through 1.22.6 inclusive. The CVSS 3.1 vector indicates the attack requires local access with low complexity, no privileges required, but user interaction is necessary. The impact includes high confidentiality, integrity, and availability consequences.

An attacker who convinces a user to open a malicious file can execute arbitrary code with the user's privileges, potentially leading to full compromise of the affected system under that user context. The vulnerability impacts confidentiality, integrity, and availability at a high level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should avoid opening files from untrusted sources to prevent exploitation.