VDB
CVE-2023-25867
CVE-2023-25867
PUBLISHED
CVSS 7.800000190734863 HIGH
Adobe has released an update for Adobe Substance 3D Stager. This update addresses critical and important vulnerabilities in Adobe Substance 3D Stager including third party dependencies. Successful exploitation could lead to arbitrary code execution and memory leak in the context of the current user. Vulnerability: Access of Memory Location After End of Buffer (CWE-788) Impact: Arbitrary code execution Severity: Critical CVSS: 7.8 CWE: CWE-788
EPSS 0.33% · 25.0th percentile
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.33%
25.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Adobe Substance 3D Stager | 2.0.0, 2.0.0, 2.0.0 |
Timeline
- Mar 14, 2023 CVE Published
- Mar 28, 2023 EPSS Score
- May 6, 2023 EPSS Score
- Jun 14, 2023 EPSS Score
- Jul 23, 2023 EPSS Score
- Aug 31, 2023 EPSS Score
- Oct 9, 2023 EPSS Score
- Nov 17, 2023 EPSS Score
- Dec 26, 2023 EPSS Score
- Feb 2, 2024 EPSS Score
- Mar 12, 2024 EPSS Score
- Apr 20, 2024 EPSS Score