CVE-2026-21305

CVE-2026-21305 is an out-of-bounds write vulnerability affecting Adobe Substance 3D Painter versions 11.0.3 and earlier. This flaw carries a high CVSS score of 7.8, indicating a significant risk, as it could lead to arbitrary code execution in the context of the current user if a malicious file is opened. While user interaction is required for exploitation, the potential impact includes high confidentiality, integrity, and availability compromise. There is currently no evidence of active exploitation, nor are there publicly available exploit modules like Metasploit or Nuclei, though the vulnerability has garnered considerable community discussion with 10 mentions.