PT-2025-32946 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Substance3D - Stager versions 3.1.3 and earlier Description: Substance3D - Stager is affected by an out-of-bounds write issue that may lead to arbitrary code execution with the privileges of the current user. A user must open a malicious file...

PT-2025-32899 · Adobe · Photoshop Desktop

Name of the Vulnerable Software and Affected Versions: Photoshop Desktop versions 25.12.3 through 26.8 Description: Photoshop Desktop versions 25.12.3 and 26.8 and earlier are affected by an out-of-bounds write issue that may lead to arbitrary code execution with the privileges of the current use...

PT-2025-32920 · Adobe · Substance3D - Modeler

Name of the Vulnerable Software and Affected Versions: Substance3D - Modeler versions 1.22.0 and earlier Description: Substance3D - Modeler versions 1.22.0 and earlier are affected by an out-of-bounds read issue that could lead to the disclosure of sensitive memory. Exploitation of this issue...

PT-2025-32905 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 11.0.2 and earlier Description: Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read issue that may lead to the disclosure of sensitive memory. Exploitation of this issue...

PT-2025-32934 · Adobe · Incopy

Name of the Vulnerable Software and Affected Versions: InCopy versions 20.4 and earlier InCopy version 19.5.4 Description: InCopy is susceptible to a Heap-based Buffer Overflow that may lead to arbitrary code execution with current user privileges. Successful exploitation requires a user to open ...

PT-2026-2789

Name of the Vulnerable Software and Affected Versions Substance3D - Sampler versions 5.1.0 and earlier Description The software contains an out-of-bounds write issue that may allow for arbitrary code execution with the privileges of the current user. Successful exploitation requires a user to ope...

PT-2025-32909 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 11.0.2 and earlier Description: Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read issue that may lead to the disclosure of sensitive memory. Exploitation of this issue...

PT-2025-32936 · Adobe · Incopy

Name of the Vulnerable Software and Affected Versions: InCopy versions 20.4 and earlier InCopy version 19.5.4 Description: InCopy is susceptible to a Heap-based Buffer Overflow that may lead to arbitrary code execution with current user privileges. Successful exploitation requires a user to open ...

PT-2025-32902 · Adobe · Substance3D - Modeler

Name of the Vulnerable Software and Affected Versions: Substance3D - Modeler versions 1.22.0 and earlier Description: Substance3D - Modeler is affected by an out-of-bounds write issue that may lead to arbitrary code execution with current user privileges. Exploitation requires a user to open a...

PT-2025-32931 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and 19.5.4 and earlier Description: InDesign Desktop versions 20.4, 19.5.4, and earlier are affected by an out-of-bounds read issue that may result in the disclosure of sensitive memory. Exploitation of this iss...

PT-2025-34093

Name of the Vulnerable Software and Affected Versions: Substance3D - Stager versions 3.1.3 and earlier Description: Substance3D - Stager is affected by an out-of-bounds read issue that may lead to memory exposure. An attacker could potentially disclose sensitive information by exploiting this...

PT-2025-32926 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and 19.5.4 and earlier Description: InDesign Desktop versions 20.4, 19.5.4, and earlier are affected by a Heap-based Buffer Overflow that may lead to arbitrary code execution within the current user's context...

PT-2025-32907 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 11.0.2 and earlier Description: Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read issue that may lead to the disclosure of sensitive memory. Exploitation of this issue...

PT-2025-32943 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and earlier InDesign Desktop version 19.5.4 and earlier Description: InDesign Desktop versions 20.4 and earlier, including version 19.5.4, are affected by an out-of-bounds read issue that may lead to sensitive...

PT-2025-32953 · Dimension · Dimension

Name of the Vulnerable Software and Affected Versions: Dimension versions 4.1.3 and earlier Description: Dimension versions 4.1.3 and earlier are affected by an out-of-bounds read issue that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction,...

The vulnerability of the microprogramming software of industrial thermal printers SATO CL4NX Plus, CL6NX Plus, CL4NX-J Plus, and CL6NX-J Plus lies in the ability to load files of a harmful type without restrictions. This allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of microprogrammed industrial thermal printers such as SATO CL4NX Plus, CL6NX Plus, CL4NX-J Plus, and CL6NX-J Plus lies in the ability to load files of a malicious nature without limitation. Exploiting this vulnerability can allow an attacker to enhance their privileges and...

Vulnerabilities fixed in Rockwell Automation Arena

Rockwell Automation has fixed vulnerabilities in Arena Simulation. The vulnerabilities are in the way Arena Simulation processes files, with this it is possible to manipulate and read memory. The vulnerabilities allow malicious actors to reveal sensitive information and execute arbitrary code whe...

Malicious XDG Desktop File

This module creates a malicious XDG Desktop .desktop file. On most modern systems, desktop files are not trusted by default. The user will receive a warning prompt that the file is not trusted when running the file, but may choose to run the file anyway. The default file manager applications in...

CVE-2025-53011

MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In version 1.39.2, when parsing shader nodes in a MTLX file, the MaterialXCore code accesses a potentially null pointer, which can lead to crashes with maliciously craft...

CVE-2025-6076 CVE-2025-6076

Partner Software's Partner Software application and Partner Web application do not sanitize files uploaded on the "reports" tab, allowing an authenticated attacker to upload a malicious file and compromise the device. By default, the software runs as SYSTEM, heightening the severity of the...