CVE-2026-48419

Substance3D - Sampler by Adobe is affected by an out-of-bounds write vulnerability (CWE-787) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction , as the victim must open a malicious file. The vulnerability is rated CVSS 3.1: 7.8 (H...

EUVD-2026-65637

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48419 Substance3D - Sampler | Out-of-bounds Write (CWE-787)

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48432 Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48432 Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2026-65635

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48432

Substance3D - Designer (Adobe) is affected by a Heap-based Buffer Overflow (CWE-122) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The CVSS 3.1 base score is 7.8 (HIGH) with vector AV:L/AC...

CVE-2026-48430

Substance3D - Designer (Adobe) is affected by a Heap-based Buffer Overflow (CWE-122) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction : the victim must open a crafted malicious file. The CVSS 3.1 score is 7.8 (HIGH) , reflecting ...

CVE-2026-48430 Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2026-65634

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48430 Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-71564 Substance3D - Designer | Out-of-bounds Write (CWE-787)

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-71564 Substance3D - Designer | Out-of-bounds Write (CWE-787)

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2026-65633

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-71564

Substance3D - Designer (Adobe) is affected by an out-of-bounds write vulnerability (CWE-787) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction : a victim must open a malicious file. The CVSS 3.1 score is 7.8 (HIGH) with a local at...

CVE-2026-48428

Substance3D – Designer is affected by a heap-based buffer overflow (CWE-122) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction , as a victim must open a malicious file. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector a...

CVE-2026-48426 Substance3D - Designer | Out-of-bounds Write (CWE-787)

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2026-65632

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48426

Substance3D - Designer (Adobe) is affected by an out-of-bounds write (CWE-787) vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction —a victim must open a malicious file. The CVSS v3.1 score is 7.8 (HIGH) with a local at...

CVE-2026-48428 Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...