CVE-2026-27273 - Substance3D - Stager | Out-of-bounds Write (CWE-787) · CoreCVE

Back Back to CVE browser

HIGH

Substance3D - Stager | Out-of-bounds Write (CWE-787)

Published Mar 10, 2026

7.8

HIGH

CVSS 3.1

EPSS 0.26%

Description

Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

Vendor Adobe Product Substance3D - Stager Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=3.1.7
- Version
  3.1.8
  Status
  unaffected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Substance3D - Stager

unaffected

Version	Status	Constraints
0	affected	<=3.1.7
3.1.8	unaffected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (1)

https://helpx.adobe.com/security/products/substance3d_stager/apsb26-29.html
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://helpx.adobe.com/security/products/substance3d_stager/apsb26-29.html		vendor-advisoryVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner adobe

Published Mar 10, 2026

Updated Aug 27, 2026

Reserved Feb 18, 2026

Link CVE-2026-27273

CISA Vulnrichment

Updated Mar 10, 2026

Status Analyzed

Modified Aug 28, 2026

Link CVE-2026-27273

Severity n/a

Public date n/a

Links CVE-2026-27273