Adobe Substance 3D Designer vulnerabilities

CVE-2026-21335 [HIGH] CWE-787 CVE-2026-21335: Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerabil Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-21334 [HIGH] CWE-787 CVE-2026-21334: Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerabil Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-21307 [HIGH] CWE-787 CVE-2026-21307: Substance3D - Designer versions 15.0.3 and earlier are affected by an out-of-bounds write vulnerabil Substance3D - Designer versions 15.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-34684 [HIGH] CWE-787 CVE-2026-34684: Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerabil Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-34683 [HIGH] CWE-787 CVE-2026-34683: Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerabil Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-34681 [HIGH] CWE-787 CVE-2026-34681: Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerabil Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-34682 [HIGH] CWE-787 CVE-2026-34682: Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerabil Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-48426 [HIGH] CWE-787 CVE-2026-48426: Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbi Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-48427 [HIGH] CWE-787 CVE-2026-48427: Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbi Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-71564 [HIGH] CWE-787 CVE-2026-71564: Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbi Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103821 [HIGH] CWE-787 CVE-2026-103821: Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbi Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-48428 [HIGH] CWE-122 CVE-2026-48428: Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result i Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-48431 [HIGH] CWE-122 CVE-2026-48431: Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result i Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-48433 [HIGH] CWE-122 CVE-2026-48433: Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result i Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-48432 [HIGH] CWE-122 CVE-2026-48432: Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result i Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-48430 [HIGH] CWE-122 CVE-2026-48430: Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result i Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-21161 [HIGH] CWE-787 CVE-2025-21161: Substance3D - Designer versions 14.0.2 and earlier are affected by an out-of-bounds write vulnerabil Substance3D - Designer versions 14.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-41864 [HIGH] CWE-787 CVE-2024-41864: Substance3D - Designer versions 13.1.2 and earlier are affected by an out-of-bounds write vulnerabil Substance3D - Designer versions 13.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-21164 [HIGH] CWE-787 CVE-2025-21164: Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-21166 [HIGH] CWE-787 CVE-2025-21166: Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerabilit Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.