DeutschShown in its original language — a full translation is planned for a future version.
Adobe Creative Cloud (Bridge und Substance 3D): Mehrere Schwachstellen
view advisory published 2026-10-13
Ein Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud (Bridge und Substance 3D Produkte) ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen und um Informationen offenzulegen.
01
describes (33)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-83966US | high7.8 | — | ||
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss… | ||||
| CVE-2026-83965US | high7.8 | — | ||
Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of t… | ||||
| CVE-2026-103829US | medium5.5 | — | ||
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability t… | ||||
| CVE-2026-103828US | medium5.5 | — | ||
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability t… | ||||
| CVE-2026-103827US | medium5.5 | — | ||
Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabilit… | ||||
| CVE-2026-103826US | medium5.5 | — | ||
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability t… | ||||
| CVE-2026-103825US | medium5.5 | — | ||
Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclo… | ||||
| CVE-2026-103824US | medium5.5 | — | ||
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability t… | ||||
| CVE-2026-103823US | medium5.5 | — | ||
Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabilit… | ||||
| CVE-2026-103822US | medium5.5 | — | ||
Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclo… | ||||
| CVE-2026-103821US | high7.8 | — | ||
Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this is… | ||||
| CVE-2026-100131US | medium5.5 | — | ||
Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclos… | ||||
| CVE-2026-100130US | medium5.5 | — | ||
Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclos… | ||||
| CVE-2026-100129US | high7.8 | — | ||
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use… | ||||
| CVE-2026-100128US | high7.8 | — | ||
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use… | ||||
| CVE-2026-100127US | high7.8 | — | ||
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use… | ||||
| CVE-2026-100126US | medium5.5 | — | ||
Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive inf… | ||||
| CVE-2026-103852US | medium5.5 | — | ||
Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to… | ||||
| CVE-2026-103851US | high7.8 | — | ||
Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th… | ||||
| CVE-2026-103850US | medium5.5 | — | ||
Substance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose… | ||||
showing 20 of 33
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2026-3938 - CSAF Versionself
- WID-SEC-2026-3938 - Portal Versionself
- Adobe Security Bulletin APSB26-167 - Bridge vom 2026-10-13external
- Adobe Security Bulletin APSB26-169 - Adobe Substance 3D Designer vom 2026-10-13external
- Adobe Security Bulletin APSB26-159 - Adobe Substance 3D Sampler vom 2026-10-13external
- Adobe Security Bulletin APSB26-170 - Adobe Substance 3D Stager vom 2026-10-13external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan