csaf_bsi_white:wid-sec-w-2026-3508
csaf_bsi_white
Description
Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Daten offenzulegen.
Timeline
- Published
- 2026-09-22 22:00 UTC
- Last Modified
- 2026-09-22
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
},
{
"category": "description",
"text": "Adobe Creative Cloud umfasst Anwendungen und Dienste für Video, Design, Fotografie und Web.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Daten offenzulegen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Sonstiges\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt für Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2026-3508 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3508.json"
},
{
"category": "self",
"summary": "WID-SEC-2026-3508 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3508"
},
{
"category": "external",
"summary": "Adobe Security Bulletin apsb26-145 vom 2026-09-22",
"url": "https://helpx.adobe.com/security/products/indesign/apsb26-145.html"
},
{
"category": "external",
"summary": "Adobe Security Bulletin apsb26-148 vom 2026-09-22",
"url": "https://helpx.adobe.com/security/products/bridge/apsb26-148.html"
},
{
"category": "external",
"summary": "Adobe Security Bulletin apsb26-157 vom 2026-09-22",
"url": "https://helpx.adobe.com/security/products/premiere_pro/apsb26-157.html"
},
{
"category": "external",
"summary": "Adobe Security Bulletin apsb26-155 vom 2026-09-22",
"url": "https://helpx.adobe.com/security/products/substance3d-modeler/apsb26-155.html"
}
],
"source_lang": "en-US",
"title": "Adobe Creative Cloud Applikationen: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2026-09-22T22:00:00.000+00:00",
"generator": {
"date": "2026-09-23T11:24:28.518+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.6.0"
}
},
"id": "WID-SEC-W-2026-3508",
"initial_release_date": "2026-09-22T22:00:00.000+00:00",
"revision_history": [
{
"date": "2026-09-22T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "InDesign <ID21.6",
"product": {
"name": "Adobe Creative Cloud InDesign <ID21.6",
"product_id": "T059993"
}
},
{
"category": "product_version",
"name": "InDesign ID21.6",
"product": {
"name": "Adobe Creative Cloud InDesign ID21.6",
"product_id": "T059993-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:indesign__id21.6"
}
}
},
{
"category": "product_version_range",
"name": "InDesign <ID20.5.5",
"product": {
"name": "Adobe Creative Cloud InDesign <ID20.5.5",
"product_id": "T059994"
}
},
{
"category": "product_version",
"name": "InDesign ID20.5.5",
"product": {
"name": "Adobe Creative Cloud InDesign ID20.5.5",
"product_id": "T059994-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:indesign__id20.5.5"
}
}
},
{
"category": "product_version_range",
"name": "Bridge <15.1.8 (LTS)",
"product": {
"name": "Adobe Creative Cloud Bridge <15.1.8 (LTS)",
"product_id": "T059995"
}
},
{
"category": "product_version",
"name": "Bridge 15.1.8 (LTS)",
"product": {
"name": "Adobe Creative Cloud Bridge 15.1.8 (LTS)",
"product_id": "T059995-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:bridge_15.1.8_%2528lts%2529"
}
}
},
{
"category": "product_version_range",
"name": "Bridge <16.0.7",
"product": {
"name": "Adobe Creative Cloud Bridge <16.0.7",
"product_id": "T059996"
}
},
{
"category": "product_version",
"name": "Bridge 16.0.7",
"product": {
"name": "Adobe Creative Cloud Bridge 16.0.7",
"product_id": "T059996-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:bridge_16.0.7"
}
}
},
{
"category": "product_version_range",
"name": "Premiere <26.5",
"product": {
"name": "Adobe Creative Cloud Premiere <26.5",
"product_id": "T059997"
}
},
{
"category": "product_version",
"name": "Premiere 26.5",
"product": {
"name": "Adobe Creative Cloud Premiere 26.5",
"product_id": "T059997-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:premiere__26.5"
}
}
},
{
"category": "product_version_range",
"name": "Adobe Substance 3D Modeler <1.22.8",
"product": {
"name": "Adobe Creative Cloud Adobe Substance 3D Modeler <1.22.8",
"product_id": "T059999"
}
},
{
"category": "product_version",
"name": "Adobe Substance 3D Modeler 1.22.8",
"product": {
"name": "Adobe Creative Cloud Adobe Substance 3D Modeler 1.22.8",
"product_id": "T059999-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:adobe_substance_3d_modeler__1.22.8"
}
}
},
{
"category": "product_version_range",
"name": "Premiere Pro <25.6.6",
"product": {
"name": "Adobe Creative Cloud Premiere Pro <25.6.6",
"product_id": "T060000"
}
},
{
"category": "product_version",
"name": "Premiere Pro 25.6.6",
"product": {
"name": "Adobe Creative Cloud Premiere Pro 25.6.6",
"product_id": "T060000-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:creative_cloud:premiere_pro__25.6.6"
}
}
}
],
"category": "product_name",
"name": "Creative Cloud"
}
],
"category": "vendor",
"name": "Adobe"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-76192",
"product_status": {
"known_affected": [
"T059993",
"T059994"
]
},
"release_date": "2026-09-22T22:00:00.000+00:00",
"title": "CVE-2026-76192"
},
{
"cve": "CVE-2026-84396",
"product_status": {
"known_affected": [
"T059993",
"T059994"
]
},
"release_date": "2026-09-22T22:00:00.000+00:00",
"title": "CVE-2026-84396"
},
{
"cve": "CVE-2026-75649",
"product_status": {
"known_affected": [
"T059995",
"T059996"
]
},
"release_date": "2026-09-22T22:00:00.000+00:00",
"title": "CVE-2026-75649"
},
{
"cve": "CVE-2026-75655",
"product_status": {
"known_affected": [
"T059995",
"T059996"
]
},
"release_date": "2026-09-22T22:00:00.000+00:00",
"title": "CVE-2026-75655"
},
{
"cve": "CVE-2026-75656",
"product_status": {
"known_affected": [
"T059995",
"T059996"
]
},
"release_date": "2026-09-22T22:00:00.000+00:00",
"title": "CVE-2026-75656"
},
{
"cve": "CVE-2026-75658",
"product_status": {
"known_affected": [
"T059995",
"T059996"
]
},
"release_date": "2026-09-22T22:00:00.000+00:00",
"title": "CVE-2026-75658"
},
{
"cve": "CVE-2026-75663",
"product_status": {
"known_affected": [
"T059995",
"T059996"
]
},
"release_date": "2026-09-22T22:00:00.000+00:00",
"title": "CVE-2026-75663"
},
{
"cve": "CVE-2026-75665",
"product_status": {
"known_affected": [
"T059995",
"T059996"
]
},
"release_date": "2026-09-22T22:00:00.000+00:00",
"title": "CVE-2026-75665"
},
{
"cve": "CVE-2026-75676",
"product_status": {
"known_affected": [
"T059995",
"T059996"
]
},
"release_date": "2026-09-22T22:00:00.000+00:00",
"title": "CVE-2026-75676"
},
{
"cve": "CVE-2026-84395",
"product_status": {
"known_affected": [
"T060000",
"T059997"
]
},
"release_date": "2026-09-22T22:00:00.000+00:00",
"title": "CVE-2026-84395"
},
{
"cve": "CVE-2026-79906",
"product_status": {
"known_affected": [
"T059999"
]
},
"release_date": "2026-09-22T22:00:00.000+00:00",
"title": "CVE-2026-79906"
},
{
"cve": "CVE-2026-81998",
"product_status": {
"known_affected": [
"T059999"
]
},
"release_date": "2026-09-22T22:00:00.000+00:00",
"title": "CVE-2026-81998"
},
{
"cve": "CVE-2026-83962",
"product_status": {
"known_affected": [
"T059999"
]
},
"release_date": "2026-09-22T22:00:00.000+00:00",
"title": "CVE-2026-83962"
},
{
"cve": "CVE-2026-83963",
"product_status": {
"known_affected": [
"T059999"
]
},
"release_date": "2026-09-22T22:00:00.000+00:00",
"title": "CVE-2026-83963"
}
]
}