CVE-2023-48628

Affected software: Adobe Substance 3D Sampler

CVE-2023-48630 Adobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability I

Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-48630

CVE-2023-48630 affects Adobe Substance 3D Sampler ≤ 4.2.1. It is due to an out-of-bounds write that could allow arbitrary code execution in the context of the current user. Exploitation requires the victim to open a malicious file (user interaction). A patch is available: update to 4.2.2 or later...

CVE-2023-48629

Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Affected product/version: Substance ...

CVE-2023-48626

CVE-2023-48626 affects Adobe Substance 3D Sampler versions 4.2.1 and earlier. The issue is an out-of-bounds write in the Sampler component that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Pub...

CVE-2023-48626 Adobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability V

Adobe Substance 3D Sampler versions 4.2.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-47080 Adobe Substance 3D Stager v2.1.1 Vulnerability VI

Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in tha...

CVE-2023-47080

Summary: Adobe Substance 3D Stager (Windows/macOS) — versions 2.1.1 and earlier — suffer an out-of-bounds read that can disclose memory and bypass mitigations such as ASLR. Attack requires user interaction, as a victim must open a malicious file. Connected documents corroborate the affected versi...

CVE-2023-47081 Adobe Substance 3D Stager v2.1.1 Vulnerability II

Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in tha...

CVE-2023-47081 Adobe Substance 3D Stager v2.1.1 Vulnerability II

Adobe Substance 3D Stager versions 2.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in tha...

CVE-2023-47081

Adobe Substance 3D Stager is affected in versions 2.1.1 and earlier by an out-of-bounds read that can disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file); the attack is local with low complexity. The affected component is the Stager ap...

Adobe Substance 3D Designer 缓冲区错误漏洞

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Substance 3D Designer version 13.0.0 and prior versions, which can be exploited by an attacker to execute arbitrary code in the current user's...

Adobe Substance 3D Designer Buffer Error Vulnerability

Adobe Substance 3D Designer is a 3D design software from Adobe. A buffer error vulnerability exists in Adobe Substance 3D Designer version 13.0.0 and earlier and version 13.1.0 and earlier, which stems from being affected by an out-of-bounds read vulnerability that could lead to a sensitive memor...

PT-2023-8549 · Adobe · Substance3D - Designer

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Designer versions 13.0.0 and earlier Adobe Substance 3D Designer versions 13.1.0 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the...

PT-2023-8551 · Adobe · Substance3D - Designer

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Designer versions 13.0.0 and earlier Adobe Substance 3D Designer versions 13.1.0 and earlier Description: The issue is related to an out-of-bounds read vulnerability in the Adobe Substance 3D Designer program, which could...

PT-2023-8546 · Adobe · Substance3D - Sampler

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Sampler versions 4.2.1 and earlier Description: The issue is related to an out-of-bounds write vulnerability in memory. Exploitation of this issue could allow an attacker to execute arbitrary code with the help of a special...

PT-2023-8592 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Stager versions 2.1.1 and earlier Description: The issue is related to an out-of-bounds read vulnerability in the memory, which could allow an attacker to gain unauthorized access to protected information by using a special...

PT-2023-8544 · Adobe · Substance3D - Sampler

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Sampler versions 4.2.1 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

PT-2023-8543 · Adobe · Substance3D - Sampler

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Sampler versions 4.2.1 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...

3d-agency.it Cross Site Scripting vulnerability OBB-3807453

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...