CVE Vulnerability Catalog

Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability, but exploitation requires user interaction — a victim must run the application. Scope is changed.

Dimension is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.

Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction — a victim must open a malicious file.

An out-of-bounds write vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.

An out-of-bounds write vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.

An out-of-bounds write vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.

An out-of-bounds write vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.

An out-of-bounds write vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.

A stack-based buffer overflow vulnerability in Substance3D - Stager could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file.

A heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

A double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.