Adobe Substance 3D Sampler contains an out-of-bounds write vulnerability that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability is identified as CWE-787 and has a high severity rating with a CVSS score of 7.8.
Adobe Substance 3D Sampler contains an out-of-bounds write vulnerability that may allow arbitrary code execution when a user opens a malicious file. Exploitation requires user interaction. The vulnerability is rated high severity with a CVSS score of 7.8.
Adobe Substance 3D Sampler contains a heap-based buffer overflow vulnerability that may allow arbitrary code execution when a user opens a specially crafted malicious file. Exploitation requires user interaction. The vulnerability has a high severity rating with a CVSS score of 7.8. No patch or official remediation has been confirmed at this time.
Adobe Substance 3D Sampler contains a stack-based buffer overflow vulnerability that may allow arbitrary code execution when a user opens a malicious file. Exploitation requires user interaction. The vulnerability has a high severity score of 7.8 but no patch or official remediation has been confirmed yet.
Adobe Substance 3D Sampler contains a heap-based buffer overflow vulnerability (CVE-2026-48424) that can lead to arbitrary code execution with user interaction. The vulnerability requires a victim to open a malicious file to be exploited. It has a high severity rating with a CVSS score of 7.8. No patch or official remediation has been confirmed yet.
Adobe Substance 3D Sampler contains an out-of-bounds write vulnerability that may allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability is identified as CWE-787 and has a high severity rating with a CVSS score of 7.8.
Adobe Substance 3D Designer contains a NULL Pointer Dereference vulnerability that can cause the application to crash, resulting in a denial-of-service condition. Exploitation requires user interaction, specifically opening a malicious file. This vulnerability does not impact confidentiality or integrity but affects availability.
Adobe Substance 3D Designer contains a heap-based buffer overflow vulnerability that may allow arbitrary code execution when a user opens a specially crafted malicious file. Exploitation requires user interaction. The vulnerability has a high severity rating with a CVSS score of 7.8.
Adobe Substance 3D Designer contains a heap-based buffer overflow vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction and affects the context of the current user. No patch or official remediation has been confirmed yet.
Adobe Substance 3D Designer contains an out-of-bounds write vulnerability that may allow arbitrary code execution when a user opens a malicious file. This vulnerability requires user interaction for exploitation. It has a high severity rating with a CVSS score of 7.8.
Adobe Substance 3D Designer contains an out-of-bounds write vulnerability that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability is identified as CWE-787 and has a high severity score of 7.8. No affected versions or patch information are currently provided.
Adobe Substance 3D Designer contains a heap-based buffer overflow vulnerability that may allow arbitrary code execution when a user opens a malicious file. Exploitation requires user interaction. The vulnerability has a high severity rating with a CVSS score of 7.8.
Adobe Substance 3D Designer contains an out-of-bounds write vulnerability that may allow arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction to be exploited and affects the context of the current user. The vulnerability has a high severity rating with a CVSS score of 7.8.
Adobe Substance 3D Designer contains a heap-based buffer overflow vulnerability that may allow arbitrary code execution when a user opens a specially crafted malicious file. Exploitation requires user interaction. The vulnerability has a high severity score of 7.8 but no patch or official remediation has been confirmed yet.
Adobe Substance 3D Designer contains a heap-based buffer overflow vulnerability that can lead to arbitrary code execution when a user opens a malicious file. This vulnerability requires user interaction and affects the context of the current user. The CVSS score is 7.8, indicating a high severity level. No patch or official remediation has been confirmed yet.
CVE-2026-71443 is an Improper Input Validation vulnerability in Adobe's C2PA Tool that can cause the application to crash, resulting in a denial-of-service condition. Exploitation does not require user interaction. No patch or official remediation has been confirmed yet.
An integer underflow vulnerability (CWE-191) exists in Adobe's C2PA Tool, which can be exploited to cause an application denial-of-service (DoS) by crashing the application. Exploitation does not require user interaction and can be performed with low privileges and low attack complexity.
An integer underflow vulnerability (CWE-191) exists in Adobe C2PA Tool's CAI Content Credentials component. This flaw can be exploited remotely without user interaction to cause the application to crash, resulting in a denial-of-service condition. The vulnerability has a high severity rating with a CVSS score of 7.5. No patch or official remediation guidance is currently available, and no known exploits are reported in the wild.
CVE-2026-71444 is an integer underflow vulnerability in Adobe's C2PA Tool that can cause the application to crash, resulting in a denial-of-service condition. Exploitation does not require user interaction and can be performed locally. The vulnerability affects the CAI Content Credentials component. No affected versions or patches have been specified.
CVE-2026-71360 is an Uncontrolled Resource Consumption vulnerability in Adobe's C2PA Tool that can lead to application denial-of-service. The flaw allows an attacker to exhaust system resources without requiring user interaction, causing the application to become unavailable. No patch or official remediation has been indicated yet.