PT-2026-7373

Name of the Vulnerable Software and Affected Versions After Effects versions 25.6 and earlier Description The software is susceptible to an Integer Overflow or Wraparound issue that may lead to arbitrary code execution with the privileges of the current user. Successful exploitation requires a us...

PT-2026-7372

Name of the Vulnerable Software and Affected Versions After Effects versions 25.6 and earlier Description After Effects versions 25.6 and earlier are subject to a Use After Free issue that may lead to arbitrary code execution with the privileges of the current user. A user must open a specially...

CVE-2026-21355: Out-of-bounds Read

DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim...

CVE-2026-21327: Out-of-bounds Write

After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-7467

Name of the Vulnerable Software and Affected Versions Substance3D - Modeler versions 1.22.5 and earlier Description Substance3D - Modeler versions 1.22.5 and earlier contain an out-of-bounds read issue that may result in memory exposure. A malicious file crafted to exploit this issue requires use...

CVE-2026-21347: Integer Overflow or Wraparound

Bridge versions 15.1.3, 16.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-7379

Name of the Vulnerable Software and Affected Versions Adobe After Effects versions 25.6 and earlier Description The Adobe After Effects video and dynamic graphics editing software has an out-of-bounds write issue. Successful exploitation could allow an attacker to execute arbitrary code in the...

CVE-2026-21341: Out-of-bounds Write

Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-21342: Out-of-bounds Write

Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-21351: Use After Free

After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-7393

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 21.1 and 20.5.1 and earlier Description A Heap-based Buffer Overflow vulnerability exists that may allow arbitrary code execution with the privileges of the current user. Successful exploitation requires a user to ope...

CVE-2026-21357: Heap-based Buffer Overflow

InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-7431

Name of the Vulnerable Software and Affected Versions DNG SDK versions 1.7.1 2410 and earlier Description DNG SDK versions 1.7.1 2410 and earlier contain an out-of-bounds read issue that may result in memory exposure. An attacker could potentially use this to disclose sensitive information stored...

PT-2026-7430

Name of the Vulnerable Software and Affected Versions DNG SDK versions 1.7.1 2410 and earlier Description DNG SDK versions 1.7.1 2410 and earlier are subject to an Integer Overflow or Wraparound condition. This can result in application denial-of-service, potentially causing the application to...

PT-2026-7390

Name of the Vulnerable Software and Affected Versions Substance3D - Designer versions 15.1.0 and earlier Description The software for 3D model texturing, Adobe Substance 3D Designer, has an out-of-bounds read issue in memory. Successful exploitation could allow an attacker to disclose sensitive...

CVE-2026-21340: Out-of-bounds Read

Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that...

PT-2026-7389

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Designer versions 15.1.0 and earlier Description The software for 3D model texturing, Adobe Substance 3D Designer, has an issue involving reading beyond the allocated memory boundaries. Successful exploitation of this issue...

CVE-2026-21339: Out-of-bounds Read

Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that...

PT-2026-7468

Name of the Vulnerable Software and Affected Versions Lightroom Desktop versions 15.1 and earlier Description Lightroom Desktop versions 15.1 and earlier contain an out-of-bounds write issue. Successful exploitation could lead to arbitrary code execution with the privileges of the current user...

CVE-2026-21349: Out-of-bounds Write

Lightroom Desktop versions 15.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...