Threat database

CVE-2026-95634 is a Server-Side Request Forgery (SSRF) vulnerability in Adobe Content Credentials Rust SDK that can lead to privilege escalation without requiring user interaction. The vulnerability changes the security scope and has a high severity rating with a CVSS score of 8.6. There is no information about available patches or vendor advisories confirming remediation status.

CVE-2026-100115 is an Improper Access Control vulnerability in Adobe Content Credentials Rust SDK that allows an attacker to bypass security features and gain unauthorized write access without user interaction. The vulnerability is rated high severity with a CVSS score of 7.5. No patch or remediation information is currently provided.

CVE-2026-100137 is an Uncontrolled Resource Consumption vulnerability in Adobe Content Credentials Rust SDK that can lead to application denial-of-service. The vulnerability allows an attacker to exhaust system resources without requiring user interaction, causing the application to become unavailable. It has a high severity rating with a CVSS score of 7.5.

CVE-2026-100117 is an improper input validation vulnerability in Adobe Content Credentials Rust SDK that allows an attacker to bypass security features and gain unauthorized write access without requiring user interaction. It has a high severity with a CVSS score of 7.5.

CVE-2026-100135 is an improper input validation vulnerability in Adobe Content Credentials Rust SDK that allows an attacker to bypass security features and gain unauthorized write access without user interaction. The vulnerability has a high severity score of 7.5 and does not impact confidentiality or availability but affects integrity.

CVE-2026-100118 is an improper certificate validation vulnerability in Adobe Content Credentials Rust SDK. This flaw allows an attacker to bypass security features and gain unauthorized write access without requiring user interaction. The vulnerability has a high severity rating with a CVSS score of 7.5.

CVE-2026-100113 is an improper input validation vulnerability in the Adobe Content Credentials Rust SDK. This flaw allows an attacker to bypass security features and gain unauthorized write access without requiring user interaction. The vulnerability has a high severity rating with a CVSS score of 7.5.

CVE-2026-100124 is an improper input validation vulnerability in Adobe Content Credentials Rust SDK that allows an attacker to bypass security features and gain unauthorized write access without requiring user interaction. The vulnerability has a high severity rating with a CVSS score of 7.5.

CVE-2026-106627 is an Uncontrolled Resource Consumption vulnerability in Adobe Content Credentials Rust SDK that can lead to application denial-of-service. The vulnerability allows an attacker to exhaust system resources without requiring user interaction, causing the application to become unavailable. It has a high severity rating with a CVSS score of 7.5.

CVE-2026-95632 is a high-severity vulnerability in Adobe Content Credentials Rust SDK caused by improper verification of cryptographic signatures. This flaw allows an attacker to bypass security features and gain unauthorized write access without requiring user interaction.

CVE-2026-100125 is an improper input validation vulnerability in Adobe Content Credentials Rust SDK that allows an attacker to bypass security features and gain unauthorized write access. Exploitation does not require user interaction but depends on conditions beyond the attacker's control. The vulnerability has a medium severity with a CVSS score of 5.9.

CVE-2026-100138 is an uncontrolled resource consumption vulnerability in the Adobe Content Credentials Rust SDK that can lead to application denial-of-service. An attacker can exploit this issue remotely without user interaction to exhaust system resources, causing the application to become unavailable. The vulnerability has a high severity rating with a CVSS score of 7.5. No patch or remediation information is currently provided by the vendor.

CVE-2026-48377 is an improper input validation vulnerability in Adobe Content Credentials Rust SDK that allows an attacker to bypass security features and gain unauthorized limited write access without user interaction. The vulnerability has a medium severity with a CVSS score of 5.3. No patch or remediation information is currently provided by the vendor.

CVE-2026-103820 is a path traversal vulnerability in Adobe Content Credentials Rust SDK that allows an attacker to write files outside of intended directories. Exploitation requires user interaction, specifically extracting a maliciously crafted file. The vulnerability has a medium severity with a CVSS score of 5.5. No patch or remediation information is currently provided.

Adobe Bridge contains an out-of-bounds write vulnerability (CWE-787) that can lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. Exploitation requires user interaction by opening a malicious file. The vulnerability affects multiple versions up to 16.0.7 and 15.1.8. No patch or remediation details are provided in the input data.

Adobe Bridge contains an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to and including 16.0.7 and 15.1.8. The CVSS v3.1 base score is 7.8, indicating high severity.

Adobe Bridge contains an out-of-bounds read vulnerability (CWE-125) that could allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects multiple versions up to 16.0.7 and 15.1.8. The CVSS 3.1 base score is 5.5, indicating medium severity. No known exploits are reported in the wild, and no patch information is provided.

Adobe Bridge contains an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to and including 16.0.7 and 15.1.8. The CVSS 3.1 base score is 7.8, indicating a high severity issue.

Adobe Substance 3D Designer contains an out-of-bounds read vulnerability that may allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability is rated medium severity with a CVSS score of 5.5.

Adobe Substance 3D Designer contains an out-of-bounds read vulnerability (CWE-125) that could allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability has a medium severity rating with a CVSS score of 5.5. No patch or remediation information is currently provided.