Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score
5.5
EPSS Score
0.002
Published
2026-10-13
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score
5.5
EPSS Score
0.001
Published
2026-10-13
Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score
5.5
EPSS Score
0.002
Published
2026-10-13
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score
7.8
EPSS Score
0.002
Published
2026-10-13
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score
7.8
EPSS Score
0.002
Published
2026-10-13
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVSS Score
8.8
EPSS Score
0.004
Published
2026-10-13
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
CVSS Score
7.5
EPSS Score
0.01
Published
2026-10-13
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVSS Score
7.5
EPSS Score
0.007
Published
2026-10-13
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
CVSS Score
7.5
EPSS Score
0.01
Published
2026-10-13
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
CVSS Score
7.4
EPSS Score
0.006
Published
2026-10-13