7.8
CVE-2026-103854
- EPSS 0.2%
- Veröffentlicht 13.10.2026 20:17:12
- Zuletzt bearbeitet 14.10.2026 15:50:50
- Erkennungen
Dimension | Stack-based Buffer Overflow (CWE-121)
Dimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerAdobe
≫
Produkt
Adobe Dimension
Default Statusunaffected
Version <=
4.1.8
Version
0
Status
affected
Version
4.1.9
Status
unaffected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.2% | 0.091 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Adobe | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
CWE-121 Stack-based Buffer Overflow
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
https://www.adobe.com/trust/security/products/dimension/apsb26-171.html