DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Adobe Creative Cloud Applikationen: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-05-12
Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud Applikationen ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.
01
beschreibt (22)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-34674US | high7.8 | — | ||
Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curr… | ||||
| CVE-2026-34641US | — | — | ||
Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir… | ||||
| CVE-2026-34690US | — | — | ||
After Effects is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu… | ||||
| CVE-2026-34684US | — | — | ||
Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… | ||||
| CVE-2026-34683US | — | — | ||
Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… | ||||
| CVE-2026-34682US | — | — | ||
Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… | ||||
| CVE-2026-34681US | — | — | ||
Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… | ||||
| CVE-2026-34664US | — | — | ||
Substance3D - Designer versions 15.1.0 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead t… | ||||
| CVE-2026-34687US | — | — | ||
Illustrator versions 29.8.6, 30.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current… | ||||
| CVE-2026-34676US | — | — | ||
Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current u… | ||||
| CVE-2026-34675US | — | — | ||
Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current u… | ||||
| CVE-2026-34663US | — | — | ||
Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this… | ||||
| CVE-2026-34662US | medium5.5 | — | ||
Illustrator versions 29.8.6, 30.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could expl… | ||||
| CVE-2026-34661US | — | — | ||
Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.… | ||||
| CVE-2026-34644US | — | — | ||
After Effects versions 26.0, 25.6.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the… | ||||
| CVE-2026-34643US | — | — | ||
After Effects versions 26.0, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current use… | ||||
| CVE-2026-34642US | — | — | ||
After Effects versions 26.0, 25.6.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curre… | ||||
| CVE-2026-34640US | — | — | ||
Media Encoder versions 26.0.2, 25.6.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of th… | ||||
| CVE-2026-34639US | — | — | ||
Media Encoder versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current u… | ||||
| CVE-2026-34638US | — | — | ||
Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Ex… | ||||
20 von 22 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Adobe Security Bulletin apsb26-48 vom 2026-05-12external
- Adobe Security Bulletin apsb26-51 vom 2026-05-12external
- Adobe Security Bulletin apsb26-47 vom 2026-05-12external
- Adobe Security Bulletin apsb26-46 vom 2026-05-12external
- Adobe Security Bulletin apsb26-54 vom 2026-05-12external
- Adobe Security Bulletin apsb26-52 vom 2026-05-12external
- Adobe Security Bulletin apsb26-55 vom 2026-05-12external
- WID-SEC-W-2026-1499 - CSAF Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan