Skip to content
Threat Feed

Tag

User-Interaction

6 briefs RSS
high threat

Adobe Bridge Untrusted Search Path Vulnerability Allows Arbitrary Code Execution (CVE-2026-48395)

An Untrusted Search Path vulnerability (CVE-2026-48395) in Adobe Bridge, affecting versions up to 16.0.5 and 15.1.6, can be exploited by an attacker to achieve arbitrary code execution in the context of the current user when a victim opens a specially crafted malicious file.

exploited Adobe Bridge +1 vulnerability code-execution user-interaction adobe
2t 1c 1i
high advisory

CVE-2026-48393: Out-of-Bounds Write Vulnerability in Adobe Bridge Leads to Arbitrary Code Execution

An out-of-bounds write vulnerability (CVE-2026-48393, CWE-787) in Adobe Bridge allows for arbitrary code execution in the context of the current user, requiring user interaction by opening a specially crafted malicious file.

Adobe Bridge +1 arbitrary-code-execution out-of-bounds-write user-interaction adobe
2t 1c
high advisory

CVE-2026-48390: Adobe Bridge Privilege Escalation via Incorrect Authorization

A critical privilege escalation vulnerability, CVE-2026-48390, in Adobe Bridge allows an attacker to gain unauthorized read and write access if a victim opens a specially crafted malicious file, leading to potential system compromise.

Adobe Bridge +1 privilege-escalation incorrect-authorization adobe cve user-interaction
2t 1c
high advisory

CVE-2026-34682: Adobe Substance3D Designer Out-of-Bounds Write Vulnerability

Adobe Substance3D Designer versions 15.1.0 and earlier are susceptible to an out-of-bounds write vulnerability (CVE-2026-34682) that can lead to arbitrary code execution if a user opens a specially crafted malicious file.

Substance3D Designer cve adobe out-of-bounds write code execution user interaction
2r 1t 1c
high advisory

CVE-2026-34681 - Adobe Substance3D Designer Out-of-Bounds Write Vulnerability

Adobe Substance3D Designer versions 15.1.0 and earlier are vulnerable to an out-of-bounds write, potentially leading to arbitrary code execution if a user opens a malicious file.

Substance3D Designer cve-2026-34681 out-of-bounds write code execution user interaction
2r 1t 1c
high advisory

CVE-2026-34644: Adobe After Effects Integer Overflow Vulnerability

Adobe After Effects versions 26.0, 25.6.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user if a victim opens a malicious file.

After Effects +1 integer overflow arbitrary code execution user interaction
2r 1t 1c