Adobe Security Bulletin
Last updated on October 27, 2026
Security updates available for Substance 3D Painter | APSB26-178
Summary
Adobe has released a priority 3 update for Adobe Substance 3D Painter. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution and memory exposure.
Adobe is not aware of any exploits in the wild for any of the issues addressed in this update.
Affected Versions
Solution
Adobe categorizes these updates with the following priority ratings and recommends users update their installation to the newest version via the Creative Cloud desktop app's update mechanism. For more information, please reference this help page.
For managed environments, IT administrators can use the Admin Console to deploy Creative Cloud applications to end users. Refer to this help page for more information.
Vulnerability Details
Acknowledgments:
Adobe would like to thank the following researcher for reporting the relevant issues and for working with Adobe to help protect our customers:
- Jony (jony_juice) — CVE-2026-48379, CVE-2026-48380
NOTE: Adobe maintains a public bug bounty program through Intigriti. If you’re an external security researcher interested in identifying and responsibly reporting potential security vulnerabilities to Adobe, please visit the Adobe Bug Bounty Program for more information.
For more information, visit Adobe Security Bulletin and Advisories or email PSIRT@adobe.com.
