Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud-Anwendungen ausnutzen, um Informationen offenzulegen und beliebigen Code auszuführen.
Product
Adobe Creative Cloud umfasst Anwendungen und Dienste für Video, Design, Fotografie und Web.
Vulnerabilities 10
-
High 7.8
Premiere Pro | Use After Free (CWE-416)
Premiere Pro versions 25.3, 24.6.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a m…
-
High 7.8
Substance3D - Viewer | Out-of-bounds Write (CWE-787)
Substance3D - Viewer versions 0.25.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must …
-
High 7.8
Substance3D - Viewer | Heap-based Buffer Overflow (CWE-122)
Substance3D - Viewer versions 0.25.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim…
-
High 7.8
Substance3D - Viewer | Out-of-bounds Write (CWE-787)
Substance3D - Viewer versions 0.25.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must …
-
High 7.8
Substance3D - Modeler | Use After Free (CWE-416)
Substance3D - Modeler versions 1.22.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open …
-
High 7.8
Substance3D - Modeler | Integer Overflow or Wraparound (CWE-190)
Substance3D - Modeler versions 1.22.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a …
-
High 7.8
Substance3D - Modeler | Out-of-bounds Read (CWE-125)
Substance3D - Modeler versions 1.22.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to exe…
-
Medium 5.5
After Effects | Out-of-bounds Read (CWE-125)
After Effects versions 25.3, 24.6.7 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure, potentially disclosing sensitive information. Exploitation of this issue requires user interaction in that a victim must op…
-
Medium 5.5
After Effects | Out-of-bounds Read (CWE-125)
After Effects versions 25.3, 24.6.7 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure, potentially disclosing sensitive information. Exploitation of this issue requires user interaction in that a victim must op…
-
Medium 5.5
After Effects | Out-of-bounds Read (CWE-125)
After Effects versions 25.3, 24.6.7 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure, potentially disclosing sensitive information. Exploitation of this issue requires user interaction in that a victim must op…
Revision history
-
#1
Initiale Fassung
References
-
Adobe Security Bulletin APSB25-86 vom 2025-09-09
https://helpx.adobe.com/security/products/after_effects/apsb25-86.html
-
Adobe Security Bulletin APSB25-87 vom 2025-09-09
https://helpx.adobe.com/security/products/premiere_pro/apsb25-87.html
-
Adobe Security Bulletin APSB25-92 vom 2025-09-09
https://helpx.adobe.com/security/products/substance3d-modeler/apsb25-92.html
-
Adobe Security Bulletin APSB25-89 vom 2025-09-09
https://helpx.adobe.com/security/products/substance3d-viewer/apsb25-89.html