Threat database

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain limited read and write access. The vulnerable component is restricted to an administrative network zone by default. Exploitation of this issue does not require user interaction. Scope is changed.

Adobe DNG Software Development Kit (SDK) versions 1.7.1 2502 and earlier contain an out-of-bounds read vulnerability that may expose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability has a medium severity rating with a CVSS score of 5.5.

Adobe DNG Software Development Kit (SDK) versions 1.7.1 2502 and earlier contain an out-of-bounds write vulnerability. This flaw can cause memory corruption leading to application crashes or unresponsiveness, resulting in denial-of-service. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability has a medium severity rating with a CVSS score of 5.5.

Adobe Substance 3D Sampler versions 5.1.3 and earlier contain a heap-based buffer overflow vulnerability that can lead to arbitrary code execution when a user opens a malicious file. This vulnerability requires user interaction for exploitation. The flaw is identified as CWE-122 and has a high severity rating with a CVSS score of 7.8.

Adobe Substance3D - Painter contains a heap-based buffer overflow vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. The vulnerability requires user interaction and affects the context of the current user. No specific affected versions or patches have been disclosed yet.

Adobe Substance3D - Painter contains a heap-based buffer overflow vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction and affects the context of the current user. The issue has a high severity rating with a CVSS score of 7.8. No patch or official remediation has been confirmed at this time.

Adobe Substance3D - Painter has an Untrusted Search Path vulnerability (CWE-426) that could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability has a high severity score of 7.8. No patch or official remediation has been confirmed yet.

Adobe Substance3D - Painter contains a heap-based buffer overflow vulnerability that can lead to arbitrary code execution with user interaction. Exploitation requires a victim to open a specially crafted malicious file. The vulnerability has a high severity score of 7.8 and impacts confidentiality, integrity, and availability.

Adobe Substance3D - Painter contains a heap-based buffer overflow vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction to be exploited. The CVSS score of 7.8 indicates a high severity issue with potential impact on confidentiality, integrity, and availability.

CVE-2026-75770 is an out-of-bounds write vulnerability in Adobe Substance3D - Painter. This flaw could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability has a high severity rating with a CVSS score of 7.8.

Adobe Substance3D - Painter contains an out-of-bounds read vulnerability that may disclose sensitive memory contents. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability has a medium severity rating with a CVSS score of 5.5.

Adobe Substance3D - Painter contains an out-of-bounds write vulnerability that can lead to arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability is classified as high severity with a CVSS score of 7.8. No patch or official remediation has been confirmed yet.

Adobe XD is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Illustrator Desktop 2026 contains an out-of-bounds read vulnerability that may allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability does not allow code execution or denial of service but can lead to information disclosure.

Adobe Substance 3D Sampler contains a heap-based buffer overflow vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction to be exploited and affects the context of the current user. The vulnerability is rated high severity with a CVSS score of 7.8. No specific affected versions or patches have been provided yet.

Adobe Substance 3D Sampler contains an out-of-bounds write vulnerability that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability is identified as CWE-787 and has a high severity rating with a CVSS score of 7.8. No patch or official remediation has been confirmed yet.

Adobe Substance 3D Sampler contains a heap-based buffer overflow vulnerability (CVE-2026-48423) that can lead to arbitrary code execution with user interaction. The vulnerability requires a victim to open a malicious file to be exploited. The CVSS score is 7.8, indicating high severity. No patch or official remediation information is currently available.

Adobe Substance 3D Sampler contains an out-of-bounds write vulnerability that may allow arbitrary code execution when a user opens a specially crafted malicious file. Exploitation requires user interaction. The vulnerability has a high severity score of 7.8 and impacts confidentiality, integrity, and availability.