DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Adobe Creative Cloud (Bridge und Substance 3D): Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-10-13
Ein Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud (Bridge und Substance 3D Produkte) ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen und um Informationen offenzulegen.
01
beschreibt (33)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-83966US | high7.8 | — | ||
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss… | ||||
| CVE-2026-83965US | high7.8 | — | ||
Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of t… | ||||
| CVE-2026-103829US | medium5.5 | — | ||
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability t… | ||||
| CVE-2026-103828US | medium5.5 | — | ||
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability t… | ||||
| CVE-2026-103827US | medium5.5 | — | ||
Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabilit… | ||||
| CVE-2026-103826US | medium5.5 | — | ||
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability t… | ||||
| CVE-2026-103825US | medium5.5 | — | ||
Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclo… | ||||
| CVE-2026-103824US | medium5.5 | — | ||
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability t… | ||||
| CVE-2026-103823US | medium5.5 | — | ||
Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabilit… | ||||
| CVE-2026-103822US | medium5.5 | — | ||
Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclo… | ||||
| CVE-2026-103821US | high7.8 | — | ||
Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this is… | ||||
| CVE-2026-100131US | medium5.5 | — | ||
Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclos… | ||||
| CVE-2026-100130US | medium5.5 | — | ||
Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclos… | ||||
| CVE-2026-100129US | high7.8 | — | ||
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use… | ||||
| CVE-2026-100128US | high7.8 | — | ||
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use… | ||||
| CVE-2026-100127US | high7.8 | — | ||
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use… | ||||
| CVE-2026-100126US | medium5.5 | — | ||
Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive inf… | ||||
| CVE-2026-103852US | medium5.5 | — | ||
Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to… | ||||
| CVE-2026-103851US | high7.8 | — | ||
Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th… | ||||
| CVE-2026-103850US | medium5.5 | — | ||
Substance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose… | ||||
20 von 33 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- WID-SEC-W-2026-3938 - CSAF Versionself
- WID-SEC-2026-3938 - Portal Versionself
- Adobe Security Bulletin APSB26-167 - Bridge vom 2026-10-13external
- Adobe Security Bulletin APSB26-169 - Adobe Substance 3D Designer vom 2026-10-13external
- Adobe Security Bulletin APSB26-159 - Adobe Substance 3D Sampler vom 2026-10-13external
- Adobe Security Bulletin APSB26-170 - Adobe Substance 3D Stager vom 2026-10-13external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan