CVE-2026-103839 Substance3D - Stager | Out-of-bounds Write (CWE-787)

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-103839

Substance3D - Stager is affected by an out-of-bounds write vulnerability (CWE-787). This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user. Successful exploitation requires user interaction , specifically when a victim opens a malicious file. ...

CVE-2026-103838 Substance3D - Stager | Out-of-bounds Write (CWE-787)

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-103851 Substance3D - Stager | Stack-based Buffer Overflow (CWE-121)

Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-103830

Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability (CWE-121). This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user. Successful exploitation requires user interaction , specifically where a victim opens a maliciou...

CVE-2026-103843 Substance3D - Stager | Use After Free (CWE-416)

Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-103843

Substance3D - Stager is affected by a Use After Free vulnerability (CWE-416) that could allow an attacker to achieve arbitrary code execution within the context of the current user. Successful exploitation requires user interaction , specifically for a victim to open a malicious file. Adobe has r...

gdb: gdb: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF

A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in the main functio...

CVE-2026-63162 Omnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName Parameter

Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary files outside the intended temporary directory by supplying an unanchored tmpFolderName value in the upload destination path. Attackers can exploit this flaw, for example by...

CVE-2026-63162 Omnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName Parameter

Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary files outside the intended temporary directory by supplying an unanchored tmpFolderName value in the upload destination path. Attackers can exploit this flaw, for example by...

CVE-2026-63162 Omnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName Parameter

Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary files outside the intended temporary directory by supplying an unanchored tmpFolderName value in the upload destination path. Attackers can exploit this flaw, for example by...

CVE-2026-103845

Adobe Dimension is affected by an Uncontrolled Search Path Element vulnerability (CWE-427) that could lead to arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this issue, which requires user interaction such as running the applicati...

CVE-2026-103844 Dimension | Out-of-bounds Write (CWE-787)

Dimension is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-103854 Dimension | Stack-based Buffer Overflow (CWE-121)

Dimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-103854

Adobe Dimension is affected by a Stack-based Buffer Overflow vulnerability (CWE-121). This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user. Exploitation requires user interaction , specifically by the victim opening a malicious file. Adobe h...

CVE-2026-103847 Dimension | Untrusted Search Path (CWE-426)

Dimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. A local attacker with user permissions could exploit this vulnerability to...

CVE-2026-103847

Adobe Dimension is impacted by an Untrusted Search Path vulnerability (CWE-426). A local attacker with user permissions could exploit this flaw to achieve arbitrary code execution in the context of the current user. Successful exploitation requires user interaction , specifically requiring the vi...

CVE-2026-90532

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability (CWE-863). This flaw could allow an attacker to achieve arbitrary code execution in the context of the current user, potentially leading to elevated access or control over the victim's account or session. The vulnera...

CVE-2026-90532 Adobe Experience Manager | Incorrect Authorization (CWE-863)

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user...

CVE-2026-75732 Adobe Experience Manager | Incorrect Authorization (CWE-863)

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user...