{"affected":[{"defaultStatus":"unaffected","product":"Adobe Dimension","source":"CNA: adobe","vendor":"Adobe","versions":[{"lessThanOrEqual":"v4.1.9","status":"affected","version":"0","versionType":"custom"},{"status":"unaffected","version":"v4.1.10","versionType":"custom"}]}],"cveId":"CVE-2026-118483","cwes":["CWE-20"],"description":"Dimension is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.2,"severity":"high","source":"CNA: adobe","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","version":"3.1"},{"score":8.2,"severity":"high","source":"NVD: psirt@adobe.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794374367593,"publishedAt":1794345892985,"references":[{"source":"CNA: adobe","tags":["vendor-advisory"],"url":"https://www.adobe.com/trust/security/products/dimension/apsb26-190.html"},{"source":"psirt@adobe.com","tags":[],"url":"https://www.adobe.com/trust/security/products/dimension/apsb26-190.html"}],"remediation":[],"revision":"1381d3428a60e5ee5977fb32684d9278e3ef6f068ccb6dd53d4b092c4833d829","sources":[{"modifiedAt":1794373004531,"name":"CNA: adobe","retrievedAt":1794373781757,"url":"https://www.cve.org/CVERecord?id=CVE-2026-118483"},{"modifiedAt":1794374367593,"name":"NVD","retrievedAt":1794377947051,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118483"}],"ssvc":{"assessedAt":1794268800000,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Dimension | Improper Input Validation (CWE-20)","updatedAt":1794377947051}