Lucene search

K
adobeAdobeAPSB24-04
HistoryFeb 13, 2024 - 12:00 a.m.

APSB24-04 : Security update available for Adobe Substance 3D Painter

2024-02-1300:00:00
helpx.adobe.com
15
adobe
substance 3d painter
security update
critical vulnerabilities
arbitrary code execution
memory leak

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

Low

EPSS

0.001

Percentile

29.2%

Adobe has released an update for Adobe Substance 3D Painter. This update addresses critical and important vulnerabilities in Adobe Substance 3D Painter. Successful exploitation could lead to arbitrary code execution and memory leak in the context of the current user.

Affected configurations

Vulners
Node
adobesubstance_3d_painterRange9.1.1
VendorProductVersionCPE
adobesubstance_3d_painter*cpe:2.3:a:adobe:substance_3d_painter:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

Low

EPSS

0.001

Percentile

29.2%