Adobe Security Bulletin
Last updated on Oct 13, 2026
Security update available for Adobe Substance 3D Designer | APSB26-169
Summary
Adobe has released a priority 3 security update for Adobe Substance 3D Designer. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution, application denial-of-service, and memory exposure.
Adobe is not aware of any exploits in the wild for any of the issues addressed in this update.
Affected Versions
Solution
Adobe categorizes these updates with the following priority ratings and recommends users update their installation to the newest version via the Creative Cloud desktop app's update mechanism. For more information, please reference this help page.
For managed environments, IT administrators can use the Admin Console to deploy Creative Cloud applications to end users. Refer to this help page for more information.
Vulnerability Details
Acknowledgments
Adobe would like to thank the following researchers for reporting the relevant issues and for working with Adobe to help protect our customers:
- Jony (jony_juice) — CVE-2026-103821, CVE-2026-103829, CVE-2026-103828, CVE-2026-103827, CVE-2026-103826, CVE-2026-103825, CVE-2026-103824, CVE-2026-103823, CVE-2026-103822
NOTE: Adobe maintains a public bug bounty program through Intigriti. If you’re an external security researcher interested in identifying and responsibly reporting potential security vulnerabilities to Adobe, please visit the Adobe Bug Bounty Program for more information.
For more information, visit Adobe Security Bulletin and Advisories or email PSIRT@adobe.com.
