CVE-2023-26384

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-26384

Affected software: Adobe Substance 3D Stager, versions 2.0.1 and earlier. Issue: Use-after-free in USD file parsing leading to remote/local code execution in the context of the current user. Attack scenario: Exploitation requires user interaction (victim opens a malicious USD file or page). Impac...