Arbitrary Code Execution Vulnerabilities Found in Adobe and Apple Products

Cisecurity

Arbitrary Code Execution Vulnerabilities Found in Adobe and Apple Products

First seen 12 May 2026, 20:16 UTC • •54.9

Article Content

1 / 3

Browse articles

ThreatCluster •May 13, 2026 at 20:07 UTC

•Severe vulnerabilities in Adobe and Apple products could allow arbitrary code execution.
•Users with administrative rights face higher risks from these vulnerabilities.
•No confirmed exploitation of these vulnerabilities has been reported yet.

Multiple vulnerabilities have been identified in Adobe and Apple products, both allowing for arbitrary code execution. The most severe vulnerabilities could enable attackers to execute code in the context of the logged-on user, potentially leading to unauthorized program installations, data manipulation, or account creation with full rights. Users with administrative privileges are at greater risk than those with limited rights. As of now, there are no confirmed reports of these vulnerabilities being exploited in the wild. Adobe products affected include Substance 3D Designer, Substance 3D Painter, and Substance 3D Sampler, while Apple products were not specified in detail. Security recommendations have been issued to mitigate risks associated with these vulnerabilities.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 120d ago How this analysis works

Timeline

2026-05-12

Vulnerabilities disclosed in Adobe products

Multiple vulnerabilities allowing arbitrary code execution were reported in Adobe products including Substance 3D Designer and Painter.

2026-05-12

Vulnerabilities disclosed in Apple products

Multiple vulnerabilities allowing arbitrary code execution were reported in Apple products, with no specific products listed.

More articles in this cluster (2)

Threat Graph

3 entities, 2 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Zero-day Exploit
T1189 - Drive-by Compromise
T1203 - Exploitation for Client Execution

Relationships

Zero-day Exploit related to T1189 - Drive-by Compromise
Zero-day Exploit related to T1203 - Exploitation for Client Execution

Continue Reading

Critical Cisco FMC Vulnerabilities Under Active Exploitation Cisco's Secure Firewall Management Center (FMC) Software has two critical vulnerabilities, CVE-2026-20079 and CVE-2026-20316, that are currently being exploited by state-sponsored and ransomware actors. CVE-2026-20079, rated 10.0 on the CVSS scale, allows unauthenticated remote attackers to bypass authentication and…

BlueMoon Exploit Kit Targeting Chrome and Windows by Multiple State Actors A new exploit kit named BlueMoon has been rapidly adopted by at least four espionage groups, primarily linked to China, exploiting vulnerabilities in Google Chrome and Microsoft Windows. The first observed use of BlueMoon was on August 28, 2026, by the China-aligned threat actor TA412, with subsequent adoption by…