Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:adobe_dimension:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductAdobe Dimension (cb9753df-a11e-5d40-a91b-2c02147fef57)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-103845 vulnerable 2026-11-03 10:15:49.433776 Dimension | Uncontrolled Search Path Element (CWE-427)
HIGH (8.6)
Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must run the application. Scope is changed.
Published: 2026-10-13T19:50:48.561Z
Updated: 2026-10-14T10:40:55.223Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-103854 vulnerable 2026-11-03 10:15:49.174239 Dimension | Stack-based Buffer Overflow (CWE-121)
HIGH (7.8)
Dimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2026-10-13T19:50:46.209Z
Updated: 2026-10-14T10:40:55.536Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-103844 vulnerable 2026-11-03 10:15:49.073271 Dimension | Out-of-bounds Write (CWE-787)
HIGH (7.8)
Dimension is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2026-10-13T19:50:46.932Z
Updated: 2026-10-14T10:40:55.371Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-103846 vulnerable 2026-11-03 10:15:48.492403 Dimension | Improper Neutralization of Input During Web Page Generation (Cross-Site Scripting) (CWE-79)
HIGH (8.6)
Dimension is affected by an Improper Neutralization of Input During Web Page Generation vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must run the application. Scope is changed.
Published: 2026-10-13T19:50:49.277Z
Updated: 2026-10-14T10:40:55.087Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-103847 vulnerable 2026-11-03 10:15:48.405136 Dimension | Untrusted Search Path (CWE-426)
HIGH (8.6)
Dimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must run the application. Scope is changed.
Published: 2026-10-13T19:50:43.879Z
Updated: 2026-10-14T03:59:33.373Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.