CVE-2026-21308

Katalog CVE

CVSS 5.5 · Medium EPSS 0,19%

Kerentanan Out-of-bounds Read pada adobe substance 3d designer. Skor CVSS 3.1 5.5 (Medium) menurut adobe.com.

Deskripsi (NVD)

Substance3D - Designer versions 15.0.3 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Rincian

Terbit di NVD

13 Januari 2026

Terakhir diubah

28 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber adobe.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 7,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://helpx.adobe.com/security/products/substance3d_designer/apsb26-13.html advisory vendor