CVE-2026-27219

Substance3D - Painter versions 11.1.2 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

• CWE-125

• https://helpx.adobe.com/security/products/substance3d_painter/apsb26-25.htmlVendor Advisory

Published

Mar 10, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-27212Swiper is a free and mobile touch slider with hardware accel…7.8
• CVE-2026-27214Substance3D - Painter versions 11.1.2 and earlier are affect…5.5
• CVE-2026-27215Substance3D - Painter versions 11.1.2 and earlier are affect…5.5
• CVE-2026-27216Substance3D - Painter versions 11.1.2 and earlier are affect…5.5
• CVE-2026-27217Substance3D - Painter versions 11.1.2 and earlier are affect…5.5
• CVE-2026-27218Substance3D - Painter versions 11.1.2 and earlier are affect…5.5
• CVE-2026-2722The Stock Ticker plugin for WordPress is vulnerable to Store…4.8
• CVE-2026-27220Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.2…7.8
• CVE-2026-27221Acrobat Reader versions 24.001.30307, 24.001.30308, 25.001.2…5.5
• CVE-2026-27222Bridge versions 16.0.2, 15.1.4 and earlier are affected by a…5.5
• CVE-2026-27223Adobe Experience Manager versions 6.5.23 and earlier are aff…5.4
• CVE-2026-27224Adobe Experience Manager versions 6.5.23 and earlier are aff…5.4