Adobe Lightroom

Lightroom Classic OOB Write Arbitrary Code Exec via Malicious File
CVE-2026-48409 7.8 - High - August 11, 2026

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Lightroom Classic OOB Write Arbitrary Code Exec
CVE-2026-48408 7.8 - High - August 11, 2026

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Lightroom Classic Path Traversal Enables Arbitrary File Read
CVE-2026-48441 8.6 - High - August 11, 2026

Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Directory traversal

Adobe Lightroom Classic Unauthorized File-Open Code Execution
CVE-2026-48447 7.7 - High - August 11, 2026

Lightroom Classic is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

AuthZ

Adobe Lightroom Classic OOB Write RCE Vulnerability
CVE-2026-48406 7.8 - High - August 11, 2026

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Lightroom Classic OOB write arbitrary code exec
CVE-2026-48405 7.8 - High - August 11, 2026

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Lightroom Classic Deserialization Vulnerability Allows Arbitrary Code Exec
CVE-2026-48397 8.6 - High - August 11, 2026

Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Marshaling, Unmarshaling

Adobe Lightroom Classic VLB Out-Of-Bounds Write Arbitrary Code Execution
CVE-2026-48407 7.8 - High - August 11, 2026

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Lightroom Classic: OOB write vuln (CVE-2026-48404)
CVE-2026-48404 7.8 - High - August 11, 2026

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Out-of-bounds Write in Adobe Lightroom Classic Enabling Arbitrary Exec
CVE-2026-48410 7.8 - High - August 11, 2026

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Lightroom Classic Integer Overflow (int) leads to arbitrary code execution
CVE-2026-47940 7.8 - High - August 11, 2026

Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Integer Overflow or Wraparound

Lightroom Desktop <15.1: OOB Write Allows Arbitrary Code Exec
CVE-2026-21349 7.8 - High - February 10, 2026

Lightroom Desktop versions 15.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Lightroom 8.2 OOB Write Causing Arbitrary Code Exec
CVE-2025-27197 7.8 - High - May 13, 2025

Lightroom Desktop versions 8.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Out-of-Bounds Read in Adobe Lightroom Desktop <7.4.1/13.5/12.5.1 Bypass ASLR
CVE-2024-45145 5.5 - Medium - October 09, 2024

Lightroom Desktop versions 7.4.1, 13.5, 12.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Lightroom 7.1.2 Untrusted Search Path -> Code Exec CVE-2024-20754
CVE-2024-20754 7.8 - High - March 18, 2024

Lightroom Desktop versions 7.1.2 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Untrusted Path

Adobe Lightroom 4.4 UAF in TIFF parsing leading to privilege escalation
CVE-2021-43753 7.8 - High - September 07, 2023

Adobe Lightroom versions 4.4 (and earlier) are affected by a use-after-free vulnerability in the processing of parsing TIF files that could result in privilege escalation. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Dangling pointer

Adobe Lightroom versions 9.2.0.10 and earlier have an insecure library loading vulnerability
CVE-2020-9724 - August 19, 2020

Adobe Lightroom versions 9.2.0.10 and earlier have an insecure library loading vulnerability. Successful exploitation could lead to privilege escalation.