Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 3 products
| Date | Total | Labels |
|---|
| 2026-03-10 | 1 | Patch1 |
| 2026-03-11 | 2 | Disclosure2 |
| 2026-03-12 | 2 | Disclosure1General1 |
🔴 https://dailycve.com/#adobe-substance-3d-stager-out-of-bounds-write-#cve-2026-27274-high/ Craft CMS, Stored XSS, CVE-2026-XXXXX (Low)
Post summary
The text references two CVEs with minimal detail and no actionable information such as PoC, exploit, or patch.
🔴 https://dailycve.com/pinchtab-server-side-request-forgery-ssrf-#cve-2026-30834-high-2/ Adobe Substance 3D Stager, Out-of-bounds Write, CVE-2026-27274 (High)
Post summary
The tweet references two high‑severity CVEs (CVE‑2026‑30834 and CVE‑2026‑27274) affecting Adobe Substance 3D Stager, linking to a dailycve article that likely provides further disclosure details.
🚨*CVE* CVE-2026-27274 Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of t… https://www.cve.org/CVERecord?id=CVE-2026-27274 ----- Traducción: CVE-2026-27274 Sub… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑27274 as an out‑of‑bounds write in Substance3D Stager 3.1.7 or earlier that could allow arbitrary code execution, with no evidence of exploitation or mitigation.
CVE-2026-27274 Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of t… https://www.cve.org/CVERecord?id=CVE-2026-27274
Post summary
The post announces an out-of-bounds write vulnerability in Substance3D Stager (CVE-2026-27274) that could enable arbitrary code execution, but it contains no PoC, exploit code, or mitigation details.
Substance3D - Stager | Out-of-bounds Write (CWE-787) CVE: CVE-2026-27274 Vendor: Adobe Product: Substance3D - Stager CVSS: 7.8 Credits: n/a Description: Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-27274 • https://helpx.adobe.com/security/products/substance3d_stager/apsb26-29.html #dbugs_vuln
Post summary
Adobe released a patch for Substance3D Stager 3.1.7, addressing an out‑of‑bounds write vulnerability (CVE-2026-27274) that could lead to arbitrary code execution but requires user interaction.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | adobe | substance_3d_stager | - | - | - |
| OS | apple | macos | - | - | - |
| OS | microsoft | windows | - | - | - |