Threat database

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Substance 3D Designer contains a NULL Pointer Dereference vulnerability that can cause the application to crash, resulting in denial-of-service. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability does not impact confidentiality or integrity but affects availability.

Adobe Substance 3D Sampler contains an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 6.0.3. The CVSS v3.1 base score is 7.8, indicating a high severity issue.

Adobe Substance 3D Sampler contains an out-of-bounds read vulnerability (CWE-125) that may allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 6.0.3. The CVSS 3.1 base score is 5.5, indicating a medium severity impact focused on confidentiality. No known exploits are reported in the wild, and no patch information is currently provided.

Adobe Substance 3D Sampler contains a stack-based buffer overflow vulnerability (CWE-121) that can lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. Exploitation requires user interaction by opening a malicious file. The vulnerability affects versions from 0 up to and including 6.0.3. No patch information is currently provided.

Adobe Substance 3D Sampler contains an out-of-bounds read vulnerability (CWE-125) that may disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 6.0.3. The CVSS 3.1 base score is 5.5, indicating medium severity. No known exploits are reported in the wild, and no official patch information is provided.

Adobe Photoshop Desktop contains an out-of-bounds write vulnerability that can lead to arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to and including 27.10 and 26.11.7. The CVSS score is 7.8, indicating high severity.

Adobe Photoshop Desktop contains an out-of-bounds write vulnerability (CWE-787) that could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to and including 27.10 and 26.11.7. The CVSS 3.1 base score is 7.8, indicating a high severity issue.

Adobe Photoshop Desktop contains an integer overflow or wraparound vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction to be exploited and affects versions up to 27.10 and 26.11.7. The issue has a high severity rating with a CVSS score of 7.8.

Adobe Photoshop Desktop contains a double free vulnerability (CWE-415) that could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to and including 27.10 and 26.11.7. The CVSS 3.1 base score is 7.8, indicating high severity.

Adobe Photoshop Desktop contains a heap-based buffer overflow vulnerability (CWE-122) that could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to and including 27.10 and 26.11.7. The CVSS 3.1 base score is 7.8, indicating high severity.

Adobe Photoshop Desktop contains an out-of-bounds write vulnerability (CWE-787) that can lead to arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to and including 27.10 and 26.11.7. It has a high severity with a CVSS score of 7.8.

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Photoshop Desktop contains an out-of-bounds write vulnerability (CWE-787) that may allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to and including 27.10 and 26.11.7. The CVSS v3.1 base score is 7.8, indicating a high severity level.

Adobe Photoshop Desktop contains an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to and including 27.10 and 26.11.7. The CVSS v3.1 base score is 7.8, indicating high severity.

Adobe Photoshop Desktop contains an Incorrect Authorization vulnerability (CWE-863) that can lead to arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 27.10 and 26.11.7. The vulnerability changes the security scope and has a high severity rating with a CVSS score of 8.6.

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Photoshop Desktop contains an Integer Overflow or Wraparound vulnerability (CWE-190) that may allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to and including 27.10 and 26.11.7. The CVSS 3.1 base score is 7.8, indicating high severity.

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.