cvedb.io
CVE-2023-26386
MEDIUM · CVSS 5.5
EPSS exploitation probability: 0%
Published 2023-04-12T22:15:17.887 · Last modified 2026-06-17T05:43:13.377

Summary

Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

adobe — substance_3d_stager

Does this affect you?

Add your gear to cvedb and we'll alert you only when adobe ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.