DeutschShown in its original language — a full translation is planned for a future version.
Adobe Creative Cloud Applikationen: Mehrere Schwachstellen
view advisory published 2026-09-22
Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Daten offenzulegen.
01
describes (14)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-84396US | medium5.5 | — | ||
InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to cras… | ||||
| CVE-2026-84395US | high7.1 | — | ||
Premiere Pro is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploit… | ||||
| CVE-2026-83963US | high7.8 | — | ||
Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss… | ||||
| CVE-2026-83962US | high7.8 | — | ||
Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of t… | ||||
| CVE-2026-81998US | high7.8 | — | ||
Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss… | ||||
| CVE-2026-79906US | high7.8 | — | ||
Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss… | ||||
| CVE-2026-76192US | medium5.5 | — | ||
InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to cras… | ||||
| CVE-2026-75676US | high7.8 | — | ||
Bridge is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi… | ||||
| CVE-2026-75665US | high7.8 | — | ||
Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir… | ||||
| CVE-2026-75663US | high7.8 | — | ||
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use… | ||||
| CVE-2026-75658US | high7.8 | — | ||
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use… | ||||
| CVE-2026-75656US | medium5.5 | — | ||
Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive inf… | ||||
| CVE-2026-75655US | high7.8 | — | ||
Bridge is affected by an Uncontrolled Recursion vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulne… | ||||
| CVE-2026-75649US | high7.8 | — | ||
Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir… | ||||
02
references
External citations — patches, advisories, analysis.
- Adobe Security Bulletin apsb26-148 vom 2026-09-22external
- Adobe Security Bulletin apsb26-145 vom 2026-09-22external
- Adobe Security Bulletin apsb26-157 vom 2026-09-22external
- Adobe Security Bulletin apsb26-155 vom 2026-09-22external
- WID-SEC-W-2026-3508 - CSAF Versionself
- WID-SEC-2026-3508 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan