https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-103843.htmlhttps://patchthecve.com/cve/CVE-2026-103843.htmlTue, 20 Oct 2026 00:10:02 +0000HIGH 7.8: Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.https://patchthecve.com/cve/CVE-2026-103842.htmlhttps://patchthecve.com/cve/CVE-2026-103842.htmlTue, 20 Oct 2026 00:09:46 +0000HIGH 7.8: Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issuhttps://patchthecve.com/cve/CVE-2026-103841.htmlhttps://patchthecve.com/cve/CVE-2026-103841.htmlTue, 20 Oct 2026 00:09:32 +0000HIGH 7.8: Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issuhttps://patchthecve.com/cve/CVE-2026-103840.htmlhttps://patchthecve.com/cve/CVE-2026-103840.htmlTue, 20 Oct 2026 00:09:19 +0000HIGH 7.8: Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issuhttps://patchthecve.com/cve/CVE-2026-103839.htmlhttps://patchthecve.com/cve/CVE-2026-103839.htmlMon, 19 Oct 2026 21:01:42 +0000HIGH 7.8: Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.https://patchthecve.com/cve/CVE-2026-103838.htmlhttps://patchthecve.com/cve/CVE-2026-103838.htmlMon, 19 Oct 2026 21:01:33 +0000HIGH 7.8: Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.https://patchthecve.com/cve/CVE-2026-103837.htmlhttps://patchthecve.com/cve/CVE-2026-103837.htmlMon, 19 Oct 2026 21:01:11 +0000HIGH 7.8: Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.https://patchthecve.com/cve/CVE-2026-103836.htmlhttps://patchthecve.com/cve/CVE-2026-103836.htmlMon, 19 Oct 2026 21:00:52 +0000HIGH 7.8: Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.https://patchthecve.com/cve/CVE-2026-103835.htmlhttps://patchthecve.com/cve/CVE-2026-103835.htmlMon, 19 Oct 2026 20:58:10 +0000HIGH 7.8: Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.https://patchthecve.com/cve/CVE-2026-103834.htmlhttps://patchthecve.com/cve/CVE-2026-103834.htmlMon, 19 Oct 2026 20:57:47 +0000HIGH 7.8: Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.https://patchthecve.com/cve/CVE-2026-103833.htmlhttps://patchthecve.com/cve/CVE-2026-103833.htmlMon, 19 Oct 2026 20:57:26 +0000HIGH 7.8: Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.https://patchthecve.com/cve/CVE-2026-103832.htmlhttps://patchthecve.com/cve/CVE-2026-103832.htmlMon, 19 Oct 2026 20:57:19 +0000HIGH 7.8: Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.https://patchthecve.com/cve/CVE-2026-103830.htmlhttps://patchthecve.com/cve/CVE-2026-103830.htmlMon, 19 Oct 2026 20:56:44 +0000HIGH 7.8: Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.https://patchthecve.com/cve/CVE-2026-27309.htmlhttps://patchthecve.com/cve/CVE-2026-27309.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 7.8: Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.