CWE-787: Out-of-bounds Write vulnerabilities

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Photoshop Desktop contains an out-of-bounds write vulnerability (CWE-787) that could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to and including 27.10 and 26.11.7. The CVSS 3.1 base score is 7.8, indicating high severity.

Adobe Substance 3D Stager contains an out-of-bounds write vulnerability (CWE-787) that can lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. Exploitation requires user interaction by opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. No patch information is provided, and no known exploits are reported in the wild.

Adobe Substance 3D Stager contains an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. The CVSS score is 7.8, indicating high severity.

Adobe Substance 3D Stager contains an out-of-bounds write vulnerability (CWE-787) that can lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. Exploitation requires user interaction by opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. The CVSS 3.1 base score is 7.8, indicating high severity.

Adobe Substance 3D Stager contains an out-of-bounds write vulnerability (CWE-787) that can lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. Exploitation requires user interaction by opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. No patch information is provided, and no known exploits are reported in the wild.

Adobe Substance 3D Stager contains an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. The issue has a high severity rating with a CVSS score of 7.8.

Adobe Substance 3D Stager contains an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. The CVSS 3.1 base score is 7.8, indicating a high severity issue.

Adobe Substance 3D Stager contains an out-of-bounds write vulnerability (CWE-787) that can lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. Exploitation requires user interaction by opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. The CVSS score is 7.8, indicating a high severity level.

Adobe Substance 3D Stager contains an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 3.1.8. The CVSS 3.1 base score is 7.8, indicating a high severity issue.

Adobe Dimension contains an out-of-bounds write vulnerability (CWE-787) that can lead to arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions from 0 up to and including 4.1.8. The CVSS 3.1 base score is 7.8, indicating high severity.

CVE-2026-105005 is a high-severity out-of-bounds write vulnerability in the Schannel component of Microsoft Windows 11 version 26H1. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects Windows 11 builds from 10.0.28000.0 up to but not including 10.0.28000.3231. Microsoft has released an official fix in version 10.0.28000.3231 to address this issue.

CVE-2026-97762 is a high-severity vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. It involves an out-of-bounds write that could allow an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to specific fixed releases. Microsoft has issued official fixes for this vulnerability.

CVE-2026-96235 is a high-severity out-of-bounds write vulnerability in the Microsoft .NET 10.0 runtime that allows an unauthorized attacker to execute code remotely over a network. The flaw affects multiple .NET runtime versions prior to their respective fixed releases. Microsoft has issued official fixes for all affected versions.

CVE-2026-96233 is an out-of-bounds write vulnerability in the Microsoft .NET runtime, specifically affecting ASP.NET Core. This flaw allows an unauthorized attacker to cause a denial of service over a network. The vulnerability affects multiple versions of the .NET runtime prior to their respective fixed releases. A high-severity CVSS 3.1 score of 7.5 has been assigned. Official patches are available from Microsoft to remediate this issue.

CVE-2026-70007 is a high-severity vulnerability in the Microsoft .NET runtime involving an out-of-bounds write. This flaw allows an unauthorized attacker to execute code remotely over a network. Multiple versions of the .NET runtime are affected, with official patches available to address the issue.

CVE-2026-83910 is a critical out-of-bounds write vulnerability in the RPC Runtime component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an unauthorized attacker to execute code remotely over a network without user interaction. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official patches to address this issue.

CVE-2026-96224 is a high-severity out-of-bounds write vulnerability in Microsoft .NET runtime versions including 3.0.0.0, 3.5.0, 4.7.x, 4.8.x, 8.0.x, 9.0.x, 10.0.x, 11.0.0-rc.1, 17.14.x, and 18.10.x. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has been officially fixed in multiple versions, with patches available from Microsoft.