VDB
CVE-2023-25876
CVE-2023-25876
PUBLISHED
CVSS 5.5 MEDIUM
Adobe has released an update for Adobe Substance 3D Stager. This update addresses critical and important vulnerabilities in Adobe Substance 3D Stager including third party dependencies. Successful exploitation could lead to arbitrary code execution and memory leak in the context of the current user. Vulnerability: Out-of-bounds Read (CWE-125) Impact: Memory leak Severity: Important CVSS: 5.5 CWE: CWE-125
EPSS 0.33% · 23.2th percentile
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS Score
0.33%
23.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Adobe Substance 3D Stager | 2.0.0, 2.0.0, 2.0.0 |
Timeline
- Mar 14, 2023 CVE Published
- Mar 28, 2023 EPSS Score
- May 6, 2023 EPSS Score
- Jun 13, 2023 EPSS Score
- Jul 22, 2023 EPSS Score
- Aug 30, 2023 EPSS Score
- Oct 7, 2023 EPSS Score
- Nov 15, 2023 EPSS Score
- Dec 24, 2023 EPSS Score
- Jan 31, 2024 EPSS Score
- Mar 10, 2024 EPSS Score
- Apr 18, 2024 EPSS Score