DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Adobe Creative Cloud Applikationen: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-09-22
Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Daten offenzulegen.
01
beschreibt (14)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-84396US | medium5.5 | — | ||
InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to cras… | ||||
| CVE-2026-84395US | high7.1 | — | ||
Premiere Pro is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploit… | ||||
| CVE-2026-83963US | high7.8 | — | ||
Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss… | ||||
| CVE-2026-83962US | high7.8 | — | ||
Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of t… | ||||
| CVE-2026-81998US | high7.8 | — | ||
Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss… | ||||
| CVE-2026-79906US | high7.8 | — | ||
Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss… | ||||
| CVE-2026-76192US | medium5.5 | — | ||
InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to cras… | ||||
| CVE-2026-75676US | high7.8 | — | ||
Bridge is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requi… | ||||
| CVE-2026-75665US | high7.8 | — | ||
Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir… | ||||
| CVE-2026-75663US | high7.8 | — | ||
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use… | ||||
| CVE-2026-75658US | high7.8 | — | ||
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use… | ||||
| CVE-2026-75656US | medium5.5 | — | ||
Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive inf… | ||||
| CVE-2026-75655US | high7.8 | — | ||
Bridge is affected by an Uncontrolled Recursion vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulne… | ||||
| CVE-2026-75649US | high7.8 | — | ||
Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Adobe Security Bulletin apsb26-148 vom 2026-09-22external
- Adobe Security Bulletin apsb26-145 vom 2026-09-22external
- Adobe Security Bulletin apsb26-157 vom 2026-09-22external
- Adobe Security Bulletin apsb26-155 vom 2026-09-22external
- WID-SEC-W-2026-3508 - CSAF Versionself
- WID-SEC-2026-3508 - Portal Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan