PT-2026-3196

Name of the Vulnerable Software and Affected Versions Process Optimization affected versions not specified Description An authenticated attacker with standard user privileges can modify Process Optimization project files, insert code, and potentially gain the privileges of a user who interacts wi...

PT-2026-2769

Name of the Vulnerable Software and Affected Versions Dreamweaver Desktop versions 21.6 and earlier Description Dreamweaver Desktop versions 21.6 and earlier are susceptible to an Improper Input Validation issue. Successful exploitation of this issue could lead to arbitrary code execution within...

PT-2026-2783

Name of the Vulnerable Software and Affected Versions Substance3D - Modeler versions 1.22.4 and earlier Description Substance3D - Modeler is susceptible to a NULL Pointer Dereference issue. Successful exploitation of this issue could result in a denial-of-service condition for the application. Us...

PT-2026-2770

Name of the Vulnerable Software and Affected Versions Dreamweaver Desktop versions 21.6 and earlier Description Dreamweaver Desktop versions 21.6 and earlier are susceptible to an Improper Input Validation issue. This could allow an attacker to manipulate or inject malicious data into files on th...

PT-2026-2788

Name of the Vulnerable Software and Affected Versions Substance3D - Painter versions 11.0.3 and earlier Description The software contains an out-of-bounds write issue that may allow for arbitrary code execution with the privileges of the current user. Successful exploitation requires a user to op...

PT-2026-2791

Name of the Vulnerable Software and Affected Versions Substance3D - Designer versions 15.0.3 and earlier Description Substance3D - Designer is affected by an Out-of-bounds Read issue that may result in memory exposure. An attacker could potentially use this to disclose sensitive information store...

PT-2026-2776

Name of the Vulnerable Software and Affected Versions Illustrator versions 29.8.3 through 30.0 Description Illustrator versions 29.8.3 through 30.0 are subject to an Untrusted Search Path issue that may lead to arbitrary code execution with the privileges of the current user. This occurs when the...

PT-2026-2772

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 19.5.5 and earlier InDesign Desktop version 21.0 Description InDesign Desktop versions 19.5.5 and 21.0 are susceptible to an Access of Uninitialized Pointer issue. Successful exploitation of this issue could lead to...

PT-2026-2782

Name of the Vulnerable Software and Affected Versions Substance3D - Modeler versions 1.22.4 and earlier Description The software contains an out-of-bounds write issue that may allow for arbitrary code execution with the privileges of the current user. Successful exploitation requires a user to op...

PT-2026-2790

Name of the Vulnerable Software and Affected Versions Substance3D - Designer versions 15.0.3 and earlier Description The software contains an out-of-bounds write issue that may allow for arbitrary code execution with the privileges of the current user. User interaction is needed, specifically...

PT-2026-2771

Name of the Vulnerable Software and Affected Versions Dreamweaver Desktop versions 21.6 and earlier Description Dreamweaver Desktop versions 21.6 and earlier are susceptible to an Incorrect Authorization issue. Successful exploitation could lead to arbitrary code execution with the privileges of...

CVE-2023-45775

In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-45773

In multiple functions of btmblegap.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-45774

In fixUpIncomingShortcutInfo of ShortcutService.java, there is a possible way to view another user's image due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40079

In injectSendIntentSender of ShortcutService.java, there is a possible background activity launch due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40097

In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2023-40134

In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40110

In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2023-40101

In collapse of canonicalizemd.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40109

In createFromParcel of UsbConfiguration.java, there is a possible background activity launch BAL due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...