Adobe Substance 3D Designer vulnerabilities

CVE-2026-21335 [HIGH] CWE-787 CVE-2026-21335: Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerabil Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-21334 [HIGH] CWE-787 CVE-2026-21334: Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerabil Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-21307 [HIGH] CWE-787 CVE-2026-21307: Substance3D - Designer versions 15.0.3 and earlier are affected by an out-of-bounds write vulnerabil Substance3D - Designer versions 15.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-34684 [HIGH] CWE-787 CVE-2026-34684: Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerabil Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-34683 [HIGH] CWE-787 CVE-2026-34683: Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerabil Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-34681 [HIGH] CWE-787 CVE-2026-34681: Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerabil Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-34682 [HIGH] CWE-787 CVE-2026-34682: Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerabil Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-21161 [HIGH] CWE-787 CVE-2025-21161: Substance3D - Designer versions 14.0.2 and earlier are affected by an out-of-bounds write vulnerabil Substance3D - Designer versions 14.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-41864 [HIGH] CWE-787 CVE-2024-41864: Substance3D - Designer versions 13.1.2 and earlier are affected by an out-of-bounds write vulnerabil Substance3D - Designer versions 13.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-27172 [HIGH] CWE-787 CVE-2025-27172: Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-21138 [HIGH] CWE-787 CVE-2025-21138: Substance3D - Designer versions 14.0 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Designer versions 14.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-21136 [HIGH] CWE-787 CVE-2025-21136: Substance3D - Designer versions 14.0 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Designer versions 14.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-21164 [HIGH] CWE-787 CVE-2025-21164: Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-21166 [HIGH] CWE-787 CVE-2025-21166: Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-21165 [HIGH] CWE-787 CVE-2025-21165: Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2023-48639 [HIGH] CWE-787 CVE-2023-48639: Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 13.1.0 (and earlier) are affected by a Adobe Substance 3D Designer versions 13.0.0 (and earlier) and 13.1.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-21169 [HIGH] CWE-122 CVE-2025-21169: Substance3D - Designer versions 14.1 and earlier are affected by a Heap-based Buffer Overflow vulner Substance3D - Designer versions 14.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-21139 [HIGH] CWE-122 CVE-2025-21139: Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulner Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-21137 [HIGH] CWE-122 CVE-2025-21137: Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulner Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2023-26415 [HIGH] CWE-787 CVE-2023-26415: Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds write vulne Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.