DeutschShown in its original language — a full translation is planned for a future version.
Adobe Creative Cloud Applikationen: Mehrere Schwachstellen
view advisory published 2026-02-10
Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um beliebigen Programmcode auszuführen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen oder Daten zu manipulieren.
01
describes (44)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-21349US | — | — | ||
Lightroom Desktop versions 15.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. E… | ||||
| CVE-2026-21348US | — | — | ||
Substance3D - Modeler versions 1.22.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerabil… | ||||
| CVE-2026-21355US | — | — | ||
DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to dis… | ||||
| CVE-2026-21354US | — | — | ||
DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service. An attacker could exploit… | ||||
| CVE-2026-21353US | — | — | ||
DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current… | ||||
| CVE-2026-21352US | — | — | ||
DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Explo… | ||||
| CVE-2026-21347US | — | — | ||
Bridge versions 15.1.3, 16.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the curre… | ||||
| CVE-2026-21346US | — | — | ||
Bridge versions 15.1.3, 16.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Ex… | ||||
| CVE-2026-21345US | — | — | ||
Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an all… | ||||
| CVE-2026-21344US | — | — | ||
Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an all… | ||||
| CVE-2026-21343US | — | — | ||
Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an all… | ||||
| CVE-2026-21342US | — | — | ||
Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2026-21341US | — | — | ||
Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2026-21358US | — | — | ||
InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in application denial-of-service. An attacker could… | ||||
| CVE-2026-21357US | — | — | ||
InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cu… | ||||
| CVE-2026-21351US | — | — | ||
After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitatio… | ||||
| CVE-2026-21350US | — | — | ||
After Effects versions 25.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vu… | ||||
| CVE-2026-21340US | — | — | ||
Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerabi… | ||||
| CVE-2026-21339US | — | — | ||
Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerabi… | ||||
| CVE-2026-21338US | — | — | ||
Substance3D - Designer versions 15.1.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could expl… | ||||
showing 20 of 44
02
references
External citations — patches, advisories, analysis.
- Adobe Security Bulletin APSB26-15 vom 2026-02-10external
- Adobe Security Bulletin APSB26-14 vom 2026-02-10external
- Adobe Security Bulletin APSB26-21 vom 2026-02-10external
- Adobe Security Bulletin APSB26-23 vom 2026-02-10external
- Adobe Security Bulletin APSB26-17 vom 2026-02-10external
- Adobe Security Bulletin APSB26-06 vom 2026-02-10external
- Adobe Security Bulletin APSB26-22 vom 2026-02-10external
- Adobe Security Bulletin APSB26-19 vom 2026-02-10external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan