Skip to content
OpenAdvisories
Medium WID-SEC-2026-4206 3 CVEs

Adobe Creative Cloud Desktop Application und Substance 3D Painter: Mehrere Schwachstellen

Published Oct 27, 2026 · Updated Oct 27, 2026 · de-DE

Vendor: Adobe Product: Creative Cloud Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen oder vertrauliche Informationen offenzulegen.

Product

Adobe Creative Cloud umfasst Anwendungen und Dienste für Video, Design, Fotografie und Web.

Vulnerabilities 3

  • High 7.8
    CVE-2026-48379

    Substance3D - Painter | Stack-based Buffer Overflow (CWE-121)

    Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe Adobe Substance 3D Painter
  • High 7.3
    CVE-2026-104349

    Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)

    Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exp…

    Adobe Creative Cloud Desktop Application
  • Medium 5.5
    CVE-2026-48380

    Substance3D - Painter | Out-of-bounds Read (CWE-125)

    Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction i…

    Adobe Adobe Substance 3D Painter

Revision history

  1. #1

    Initiale Fassung

References