CVE-2026-21287 Substance3D - Stager | Use After Free (CWE-416)

Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-21278

InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitation of this issue requires user interaction in that a...

CVE-2026-21281 InCopy | Heap-based Buffer Overflow (CWE-122)

InCopy versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-21280 Illustrator | Untrusted Search Path (CWE-426)

Illustrator versions 29.8.3, 30.0 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that...

CVE-2026-21277

Summary: CVE-2026-21277 affects Adobe InDesign Desktop (versions 21.0, 19.5.5 and earlier). A heap-based buffer overflow could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a specially crafted file. Multiple sources...

CVE-2026-21278 InDesign Desktop | Out-of-bounds Read (CWE-125)

InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitation of this issue requires user interaction in that a...

CVE-2026-0881

Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

PT-2026-2773

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 19.5.5 and earlier InDesign Desktop version 21.0 Description InDesign Desktop versions 19.5.5 and 21.0 are susceptible to an Access of Uninitialized Pointer issue. Successful exploitation of this issue could lead to...

Adobe Illustrator 代码问题漏洞

Adobe Illustrator is a suite of vector-based image creation software from the American company Audobee Adobe. A code issue vulnerability exists in Adobe Illustrator version 29.8.3, 30.0 and prior versions, which stems from a null pointer dereference that could lead to a denial of service in the...

PT-2026-2783

Name of the Vulnerable Software and Affected Versions Substance3D - Modeler versions 1.22.4 and earlier Description Substance3D - Modeler is susceptible to a NULL Pointer Dereference issue. Successful exploitation of this issue could result in a denial-of-service condition for the application. Us...

Adobe InDesign Desktop 安全漏洞

Adobe InDesign is a professional desktop publishing software developed by Adobe for layout and page layout in print and digital media. Adobe InDesign suffers from a heap buffer overflow vulnerability that originates from a partial overwrite of heap memory, which can be exploited by an attacker to...

Adobe Dreamweaver Desktop 输入验证错误漏洞

Adobe Dreamweaver Desktop is a web design and development software from Adobe. An input validation error vulnerability exists in Adobe Dreamweaver Desktop 21.6 and prior versions, which stems from improper input validation and could lead to arbitrary file system writes...

Adobe Dreamweaver Desktop 安全漏洞

Adobe Dreamweaver is a professional web code editor and web development tool developed by Adobe. Adobe Dreamweaver suffers from an authorization issue vulnerability that can be exploited by attackers to execute arbitrary code on the system...

PT-2026-2784

Name of the Vulnerable Software and Affected Versions Substance3D - Modeler versions 1.22.4 and earlier Description Substance3D - Modeler is susceptible to a NULL Pointer Dereference issue. Successful exploitation of this issue could result in a denial-of-service condition. User interaction is...

CVE-2025-69272 Spectrum password returned in clear

Cleartext Transmission of Sensitive Information vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Sniffing Attacks.This issue affects DX NetOps Spectrum: 21.2.1 and earlier...

CVE-2025-69269 Spectrum command injection in NCM service

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows OS Command Injection.This issue affects DX NetOps Spectrum: 23.3.6 and earlier...

WordPress Live sales notification for WooCommerce plugin <= 2.3.46 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Jitlada in WordPress Plugin Live sales notification for WooCommerce versions = 2.3.46...

Apache NimBLE 缓冲区错误漏洞

Apache NimBLE is an open source Bluetooth 5.4 stack host and controller from the Apache Foundation, USA, that completely replaces the proprietary SoftDevice on Nordic chipsets.It is part of the Apache Mynewt project. A buffer error vulnerability exists in Apache NimBLE 1.8 and earlier versions,...

Apache NimBLE 代码问题漏洞

Apache NimBLE is an open source Bluetooth 5.4 stack host and controller from the Apache Foundation, USA, that completely replaces the proprietary SoftDevice on Nordic chipsets.It is part of the Apache Mynewt project. A code issue vulnerability exists in Apache NimBLE 1.8.0 and earlier versions,...

Apache NimBLE 安全漏洞

Apache NimBLE is an open source Bluetooth 5.4 stack host and controller from the Apache Foundation, USA, that completely replaces the proprietary SoftDevice on Nordic chipsets.It is part of the Apache Mynewt project. A security vulnerability exists in Apache NimBLE versions 1.8.0 and earlier, whi...