CVE-2023-26371
First published: Wed Apr 12 2023(Updated: )
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Dimension | <=3.4.8 | |
| Apple macOS | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2023-26371?
CVE-2023-26371 is an out-of-bounds read vulnerability in Adobe Dimension that allows an attacker to execute code in the context of the current user.
Which version of Adobe Dimension is affected by CVE-2023-26371?
Adobe Dimension version 3.4.8 and earlier are affected by CVE-2023-26371.
How can an attacker exploit CVE-2023-26371?
An attacker can exploit CVE-2023-26371 by using a crafted file to trigger an out-of-bounds read, leading to code execution.
Is Apple macOS affected by CVE-2023-26371?
No, Apple macOS is not affected by CVE-2023-26371.
What is the severity level of CVE-2023-26371?
CVE-2023-26371 has a severity level of 7.8, which is considered as high.
- collector/nvd-index
- vendor/adobe
- canonical/adobe dimension
- version/adobe dimension/3.4.8
- vendor/apple
- canonical/apple macos
- vendor/microsoft
- canonical/microsoft windows