CVE-2026-103843: Substance3D - Stager | Use After Free (CWE-416)
Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Users of Adobe Substance 3D Stager are exposed when they open a malicious file. Successful exploitation can execute code with the privileges of the current user.
Does exploitation require an attacker to have access to the target system?
No privileges are required, but exploitation is local and requires user interaction. The victim must open a malicious file supplied or made available by the attacker.
What is the likely impact if exploitation succeeds?
The vulnerability could allow arbitrary code execution in the context of the current user. Its stated impact includes compromise of confidentiality, integrity, and availability.