Adobe Substance3D Stager vulnerabilities

CVE-2026-27309 [HIGH] CWE-416 CVE-2026-27309: Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-21287 [HIGH] CWE-416 CVE-2026-21287: Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-21342 [HIGH] CWE-787 CVE-2026-21342: Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-27276 [HIGH] CWE-416 CVE-2026-27276: Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-27277 [HIGH] CWE-416 CVE-2026-27277: Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-21341 [HIGH] CWE-787 CVE-2026-21341: Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-27274 [HIGH] CWE-787 CVE-2026-27274: Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-27275 [HIGH] CWE-787 CVE-2026-27275: Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-27273 [HIGH] CWE-787 CVE-2026-27273: Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-27279 [HIGH] CWE-787 CVE-2026-27279: Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-61834 [HIGH] CWE-416 CVE-2025-61834: Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-64531 [HIGH] CWE-416 CVE-2025-64531: Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-39388 [HIGH] CWE-416 CVE-2024-39388: Substance3D - Stager versions 3.0.2 and earlier are affected by a Use After Free vulnerability that Substance3D - Stager versions 3.0.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-34115 [HIGH] CWE-787 CVE-2024-34115: Substance3D - Stager versions 2.1.4 and earlier are affected by an out-of-bounds write vulnerability Substance3D - Stager versions 2.1.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-45138 [HIGH] CWE-416 CVE-2024-45138: Substance3D - Stager versions 3.0.3 and earlier are affected by a Use After Free vulnerability that Substance3D - Stager versions 3.0.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-45144 [HIGH] CWE-787 CVE-2024-45144: Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-45140 [HIGH] CWE-787 CVE-2024-45140: Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-45141 [HIGH] CWE-787 CVE-2024-45141: Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-45152 [HIGH] CWE-787 CVE-2024-45152: Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-43568 [HIGH] CWE-416 CVE-2025-43568: Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that Substance3D - Stager versions 3.1.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.