EUVD-2026-65641
GHSA-q7jm-g3f9-qpcw
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
File-open trigger requires local delivery and active victim interaction (UI:R, AV:L); no attacker credentials needed (PR:N); full C/I/A reflects user-context RCE with no scope change.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
Lifecycle Timeline
2DescriptionCVE.org
Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AnalysisAI
Out-of-bounds write (CWE-787) in Adobe Substance 3D Sampler enables arbitrary code execution within the context of the authenticated local user when a victim opens a specially crafted file. All versions of the product are flagged as potentially affected per the CPE string cpe:2.3:a:adobe:adobe_substance_3d_sampler:*:*:*:*:*:*:*:*, with exact version ranges detailed in Adobe advisory APSB26-121. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the victim open a malicious file using an unpatched version of Adobe Substance 3D Sampler - no network service, daemon, or remotely reachable component is involved. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 score of 7.8 with vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H reflects a locally-triggered, file-based attack with full impact on confidentiality, integrity, and availability - but critically, no network reachability. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary remediation is to apply the update specified in Adobe Security Bulletin APSB26-121 at https://helpx.adobe.com/security/products/substance3d-sampler/apsb26-121.html; the exact patched version number must be obtained from that advisory, as it was not independently confirmed in the provided intelligence data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, issue immediate security notice to all Adobe Substance 3D Sampler users warning against opening files from untrusted sources and restrict file preview features via policy if available; disable automatic file opening. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Adobe Substance 3D Sampler
View allHeap-based buffer overflow in Adobe Substance 3D Sampler versions 5.1.3 and earlier enables arbitrary code execution at
Heap-based buffer overflow in Adobe Substance 3D Sampler enables arbitrary code execution in the context of the logged-i
Heap-based buffer overflow in Adobe Substance 3D Sampler enables arbitrary code execution in the context of the victim u
Heap-based buffer overflow in Adobe Substance 3D Sampler enables arbitrary code execution in the context of the authenti
Stack-based buffer overflow in Adobe Substance 3D Sampler enables arbitrary code execution in the context of the logged-
Heap-based buffer overflow in Adobe Substance 3D Sampler enables arbitrary code execution under the privileges of the cu
Out-of-bounds write in Adobe Substance 3D Sampler enables arbitrary code execution within the context of the current use
Out-of-bounds write in Adobe Substance 3D Sampler enables arbitrary code execution at the privilege level of the logged-
Out-of-bounds write in Adobe Substance 3D Sampler enables arbitrary code execution in the current user's context when a
Out-of-bounds write in Adobe Substance 3D Sampler (all versions per CPE) enables arbitrary code execution under the vict
Same weakness CWE-787 – Out-of-bounds Write
View allSame technique Memory Corruption
View allShare
External POC / Exploit Code
Leaving vuln.today