{
  "document" : {
    "aggregate_severity" : {
      "text" : "mittel"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "Adobe Creative Cloud umfasst Anwendungen und Dienste für Video, Design, Fotografie und Web.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud (Bridge und Substance 3D Produkte) ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen und um Informationen offenzulegen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Linux\n- UNIX\n- Windows",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-3938 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3938.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-3938 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3938"
    }, {
      "category" : "external",
      "summary" : "Adobe Security Bulletin APSB26-167 - Bridge vom 2026-10-13",
      "url" : "https://www.adobe.com/trust/security/products/bridge/apsb26-167"
    }, {
      "category" : "external",
      "summary" : "Adobe Security Bulletin APSB26-169 - Adobe Substance 3D Designer vom 2026-10-13",
      "url" : "https://www.adobe.com/trust/security/products/substance3d-designer/apsb26-169"
    }, {
      "category" : "external",
      "summary" : "Adobe Security Bulletin APSB26-159 - Adobe Substance 3D Sampler vom 2026-10-13",
      "url" : "https://www.adobe.com/trust/security/products/substance3d-sampler/apsb26-159"
    }, {
      "category" : "external",
      "summary" : "Adobe Security Bulletin APSB26-170 - Adobe Substance 3D Stager vom 2026-10-13",
      "url" : "https://www.adobe.com/trust/security/products/substance3d-stager/apsb26-170"
    } ],
    "source_lang" : "en-US",
    "title" : "Adobe Creative Cloud (Bridge und Substance 3D): Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-10-14T22:00:00.000+00:00",
      "generator" : {
        "date" : "2026-10-15T11:26:50.136+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.6.0"
        }
      },
      "id" : "WID-SEC-W-2026-3938",
      "initial_release_date" : "2026-10-13T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-10-13T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      }, {
        "date" : "2026-10-14T22:00:00.000+00:00",
        "number" : "2",
        "summary" : "Referenz(en) aufgenommen: EUVD-2026-100622"
      } ],
      "status" : "final",
      "version" : "2"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "Substance 3D Stager <3.1.9",
          "product" : {
            "name" : "Adobe Creative Cloud Substance 3D Stager <3.1.9",
            "product_id" : "T061064"
          }
        }, {
          "category" : "product_version",
          "name" : "Substance 3D Stager 3.1.9",
          "product" : {
            "name" : "Adobe Creative Cloud Substance 3D Stager 3.1.9",
            "product_id" : "T061064-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:adobe:creative_cloud:substance_3d_stager__3.1.9"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Substance 3D Sampler <6.0.4",
          "product" : {
            "name" : "Adobe Creative Cloud Substance 3D Sampler <6.0.4",
            "product_id" : "T061065"
          }
        }, {
          "category" : "product_version",
          "name" : "Substance 3D Sampler 6.0.4",
          "product" : {
            "name" : "Adobe Creative Cloud Substance 3D Sampler 6.0.4",
            "product_id" : "T061065-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:adobe:creative_cloud:substance_3d_sampler__6.0.4"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Substance 3D Designer <16.0.7",
          "product" : {
            "name" : "Adobe Creative Cloud Substance 3D Designer <16.0.7",
            "product_id" : "T061066"
          }
        }, {
          "category" : "product_version",
          "name" : "Substance 3D Designer 16.0.7",
          "product" : {
            "name" : "Adobe Creative Cloud Substance 3D Designer 16.0.7",
            "product_id" : "T061066-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:adobe:creative_cloud:substance_3d_designer__16.0.7"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Bridge <16.0.8",
          "product" : {
            "name" : "Adobe Creative Cloud Bridge <16.0.8",
            "product_id" : "T061067"
          }
        }, {
          "category" : "product_version",
          "name" : "Bridge 16.0.8",
          "product" : {
            "name" : "Adobe Creative Cloud Bridge 16.0.8",
            "product_id" : "T061067-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:adobe:creative_cloud:bridge__16.0.8"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "Bridge LTS <15.1.9",
          "product" : {
            "name" : "Adobe Creative Cloud Bridge LTS <15.1.9",
            "product_id" : "T061068"
          }
        }, {
          "category" : "product_version",
          "name" : "Bridge LTS 15.1.9",
          "product" : {
            "name" : "Adobe Creative Cloud Bridge LTS 15.1.9",
            "product_id" : "T061068-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:adobe:creative_cloud:bridge_lts__15.1.9"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Creative Cloud"
      } ],
      "category" : "vendor",
      "name" : "Adobe"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-100126",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-100126"
  }, {
    "cve" : "CVE-2026-100127",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-100127"
  }, {
    "cve" : "CVE-2026-100128",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-100128"
  }, {
    "cve" : "CVE-2026-100129",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-100129"
  }, {
    "cve" : "CVE-2026-100130",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-100130"
  }, {
    "cve" : "CVE-2026-100131",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-100131"
  }, {
    "cve" : "CVE-2026-103821",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103821"
  }, {
    "cve" : "CVE-2026-103822",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103822"
  }, {
    "cve" : "CVE-2026-103823",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103823"
  }, {
    "cve" : "CVE-2026-103824",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103824"
  }, {
    "cve" : "CVE-2026-103825",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103825"
  }, {
    "cve" : "CVE-2026-103826",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103826"
  }, {
    "cve" : "CVE-2026-103827",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103827"
  }, {
    "cve" : "CVE-2026-103828",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103828"
  }, {
    "cve" : "CVE-2026-103829",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103829"
  }, {
    "cve" : "CVE-2026-103830",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103830"
  }, {
    "cve" : "CVE-2026-103832",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103832"
  }, {
    "cve" : "CVE-2026-103833",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103833"
  }, {
    "cve" : "CVE-2026-103834",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103834"
  }, {
    "cve" : "CVE-2026-103835",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103835"
  }, {
    "cve" : "CVE-2026-103836",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103836"
  }, {
    "cve" : "CVE-2026-103837",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103837"
  }, {
    "cve" : "CVE-2026-103838",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103838"
  }, {
    "cve" : "CVE-2026-103839",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103839"
  }, {
    "cve" : "CVE-2026-103840",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103840"
  }, {
    "cve" : "CVE-2026-103841",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103841"
  }, {
    "cve" : "CVE-2026-103842",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103842"
  }, {
    "cve" : "CVE-2026-103843",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103843"
  }, {
    "cve" : "CVE-2026-103850",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103850"
  }, {
    "cve" : "CVE-2026-103851",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103851"
  }, {
    "cve" : "CVE-2026-103852",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-103852"
  }, {
    "cve" : "CVE-2026-83965",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-83965"
  }, {
    "cve" : "CVE-2026-83966",
    "product_status" : {
      "known_affected" : [ "T061064", "T061065", "T061066", "T061067", "T061068" ]
    },
    "release_date" : "2026-10-13T22:00:00.000+00:00",
    "title" : "CVE-2026-83966"
  } ]
}