Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Denotes Vulnerable Software Are we missing a CPE here? Please let us know .
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
