CVE-2026-48389

HighCVSS 7.8/10Last modified Oct 24, 2026

Description

DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121

Affected software

VendorProductVersions
AdobeAdobe DNG Software Development Kit (SDK)<= 1.7.1.2536

References

Timeline

Published
Jul 20, 2026
Last modified
Oct 24, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-48397.3A vulnerability has been found in SourceCodester Food Ordering System 1.0. This affects an unknown function of the file /purchase.php of theCVE-2026-483908.2Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vuCVE-2026-483918.2Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current useCVE-2026-483927.8Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.CVE-2026-483937.8Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.CVE-2026-483947.8Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.CVE-2026-483958.6Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current useCVE-2026-483968.6Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current uCVE-2026-483978.6Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the contCVE-2026-483985.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipuCVE-2026-483997.5Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Principles vulnerability that could result in a Security feature byCVE-2026-48408.8A security flaw has been discovered in Netcore Power 15AX up to 3.0.0.6938. Affected by this issue is the function setTools of the file /bin
CVE-2026-48389: High severity, CVSS 7.8 | Vulnix