Adobe Substance 3d Modeler vulnerabilities

43 CVEs affecting Adobe Substance 3d Modeler, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-83963, published 2026-09-22.

More from Adobe.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-52999, published 2024-12-10. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Substance3D - Modeler versions 1.14.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.…
• CVE-2024-53004, published 2024-12-10. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability…
• CVE-2024-53003, published 2024-12-10. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…
• CVE-2024-53005, published 2024-12-10. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability…
• CVE-2024-53002, published 2024-12-10. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…
• CVE-2024-53001, published 2024-12-10. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…
• CVE-2024-53000, published 2024-12-10. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…
• CVE-2024-52833, published 2024-12-10. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. Substance3D - Modeler versions 1.14.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this…
• CVE-2024-53006, published 2024-12-10. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. Substance3D - Modeler versions 1.14.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this…
• CVE-2025-27173, published 2025-03-11. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Substance3D - Modeler versions 1.15.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.…

Latest

• CVE-2026-83963, published 2026-09-22. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user…
• CVE-2026-83962, published 2026-09-22. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires…
• CVE-2026-81998, published 2026-09-22. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user…
• CVE-2026-79906, published 2026-09-22. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Substance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user…
• CVE-2026-21348, published 2026-02-10. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Substance3D - Modeler versions 1.22.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose…
• CVE-2026-21303, published 2026-01-13. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Substance3D - Modeler versions 1.22.4 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose…
• CVE-2026-21302, published 2026-01-13. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Substance3D - Modeler versions 1.22.4 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose…
• CVE-2026-21301, published 2026-01-13. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Substance3D - Modeler versions 1.22.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. Exploitation of this issue requires user…
• CVE-2026-21300, published 2026-01-13. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Substance3D - Modeler versions 1.22.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. Exploitation of this issue requires user…
• CVE-2026-21299, published 2026-01-13. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Substance3D - Modeler versions 1.22.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation…