CVE-2026-48425

Substance3D - Sampler (Adobe) is affected by a Heap-based Buffer Overflow (CWE-122) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction : the victim must open a crafted malicious file. The CVSS 3.1 base score is 7.8 (HIGH) , reflect...

CVE-2026-48423 Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-71382 Substance3D - Sampler | Out-of-bounds Write (CWE-787)

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-71382

Substance3D - Sampler (Adobe) is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires local access and user interaction , specifically the victim opening a maliciously crafted file. The vul...

CVE-2026-48420 Substance3D - Sampler | Out-of-bounds Write (CWE-787)

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48422 Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48419

Substance3D - Sampler by Adobe is affected by an out-of-bounds write vulnerability (CWE-787) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction , as the victim must open a malicious file. The vulnerability is rated CVSS 3.1: 7.8 (H...

CVE-2026-48429

Substance3D - Designer (Adobe) is affected by a NULL Pointer Dereference (CWE-476) vulnerability that can crash the application, resulting in a denial-of-service . Exploitation requires user interaction : a victim must open a malicious file crafted by an attacker. The CVSS 3.1 base score is 5.5 (...

CVE-2026-48430 Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48428 Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48426 Substance3D - Designer | Out-of-bounds Write (CWE-787)

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48427 Substance3D - Designer | Out-of-bounds Write (CWE-787)

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48433

Substance3D - Designer (Adobe) is affected by a Heap-based Buffer Overflow (CWE-122) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file. The CVSS v3.1 score is 7.8 (HIGH) with a local attack ve...

CVE-2026-48433 Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48431

Substance3D - Designer (Adobe) is affected by a Heap-based Buffer Overflow (CWE-122) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction : a victim must open a malicious file. The CVSS 3.1 base score is 7.8 (HIGH) with a local attac...

CVE-2026-48433 Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48431 Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-76189 CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)

CAI Content Credentials is affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...

CVE-2026-76189

CAI Content Credentials (Adobe) is affected by an Integer Underflow (CWE-191) that can crash the application, resulting in a denial-of-service . The attack vector is local , requires no privileges and no user interaction , with high availability impact (CVSS 3.1: 6.2 MEDIUM ). No exploitation det...

CVE-2026-71442 CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)

CAI Content Credentials is affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...