Adobe Photoshop Popular Photo Editing Software
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Adobe Photoshop.
Recent Adobe Photoshop Security Advisories
| Advisory | Title | Published |
|---|---|---|
| APSB26-181 | Adobe Photoshop Security Bulletin APSB26-181 | November 10, 2026 |
| APSB26-158 | Adobe Photoshop Security Bulletin APSB26-158 | October 13, 2026 |
| APSB26-136 | Security updates available for Adobe Photoshop (Mobile) | APSB26-136 | September 8, 2026 |
| APSB26-130 | Security updates available for Adobe Photoshop | APSB26-130 | September 8, 2026 |
| APSB26-40 | Security updates available for Adobe Photoshop | APSB26-40 | April 14, 2026 |
| APSB25-108 | Security updates available for Adobe Photoshop | APSB25-108 | November 11, 2025 |
| APSB25-75 | Security updates available for Adobe Photoshop | APSB25-75 | August 12, 2025 |
| APSB25-40 | Security updates available for Adobe Photoshop | APSB25-40 | May 13, 2025 |
| APSB25-30 | Security updates available for Adobe Photoshop | APSB25-30 | April 8, 2025 |
| APSB25-02 | Security updates available for Adobe Photoshop | APSB25-02 | January 14, 2025 |
By the Year
In 2026 there have been 44 vulnerabilities in Adobe Photoshop with an average score of 7.4 out of ten. Last year, in 2025 Photoshop had 8 security vulnerabilities published. That is, 36 more vulnerabilities have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 0.45
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 44 | 7.35 |
| 2025 | 8 | 7.80 |
| 2024 | 9 | 7.54 |
| 2023 | 15 | 6.84 |
| 2022 | 11 | 7.59 |
| 2021 | 2 | 7.80 |
| 2020 | 5 | 0.00 |
| 2019 | 36 | 0.00 |
| 2018 | 1 | 7.50 |
It may take a day or so for new Photoshop vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Adobe Photoshop Security Vulnerabilities
Photoshop Desktop is affected by an out-of-bounds write vulnerability
CVE-2026-116003
7.8 - High
- November 10, 2026
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Memory Corruption
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service
CVE-2026-118198
5.5 - Medium
- November 10, 2026
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
NULL Pointer Dereference
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability
CVE-2026-113575
7.8 - High
- November 10, 2026
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Heap-based Buffer Overflow
Photoshop Desktop is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory
CVE-2026-118199
5.5 - Medium
- November 10, 2026
Photoshop Desktop is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Out-of-bounds Read
Photoshop Desktop is affected by an out-of-bounds write vulnerability
CVE-2026-117547
7.8 - High
- November 10, 2026
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Memory Corruption
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability
CVE-2026-116480
7.8 - High
- November 10, 2026
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Heap-based Buffer Overflow
Photoshop Desktop is affected by an Uncontrolled Recursion vulnerability that could result in an application denial-of-service
CVE-2026-113578
5.5 - Medium
- November 10, 2026
Photoshop Desktop is affected by an Uncontrolled Recursion vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Stack Exhaustion
Photoshop Desktop is affected by a Use After Free vulnerability
CVE-2026-117546
7.8 - High
- November 10, 2026
Photoshop Desktop is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Dangling pointer
Photoshop Desktop is affected by a Divide By Zero vulnerability that could result in an application denial-of-service
CVE-2026-114373
5.5 - Medium
- November 10, 2026
Photoshop Desktop is affected by a Divide By Zero vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Divide By Zero
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service
CVE-2026-113571
5.5 - Medium
- November 10, 2026
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
NULL Pointer Dereference
Photoshop Desktop is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory
CVE-2026-118200
5.5 - Medium
- November 10, 2026
Photoshop Desktop is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Out-of-bounds Read
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service
CVE-2026-113569
5.5 - Medium
- November 10, 2026
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
NULL Pointer Dereference
Photoshop Desktop is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory
CVE-2026-115345
5.5 - Medium
- November 10, 2026
Photoshop Desktop is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Out-of-bounds Read
Adobe Photoshop Privilege Escalation Bypass (CVE-2020-9709)
CVE-2020-9709
8.8 - High
- November 06, 2026
Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have a security bypass vulnerability. Successful exploitation could lead to privilege escalation.
Improper Privilege Management
Adobe Photoshop Desktop OOB Write Arbitrary Code Exec (User Interaction)
CVE-2026-96521
7.8 - High
- October 13, 2026
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Memory Corruption
Photoshop Desktop OOB Write -> ATE via Malicious File
CVE-2026-96522
7.8 - High
- October 13, 2026
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Memory Corruption
Photoshop Desktop Integer Overflow Enables Arbitrary Code Execution
CVE-2026-83661
7.8 - High
- October 13, 2026
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Integer Overflow or Wraparound
Photoshop Desktop DoubleFree Arbitrary Code Exec
CVE-2026-95635
7.8 - High
- October 13, 2026
Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Double-free
Adobe Photoshop Desktop Heap Buffer Overflow (CVE-2026-95638)
CVE-2026-95638
7.8 - High
- October 13, 2026
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Heap-based Buffer Overflow
Photoshop Desktop OOB Write Arbitrary Code Exec via Malicious File
CVE-2026-96523
7.8 - High
- October 13, 2026
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Memory Corruption
Adobe Photoshop Desktop OOB Write RCE
CVE-2026-104346
7.8 - High
- October 13, 2026
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Memory Corruption
Adobe Photoshop Desktop OOB Write Arbitrary Code Execution
CVE-2026-95637
7.8 - High
- October 13, 2026
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Memory Corruption
Adobe Photoshop Desktop RCE via OOB Write
CVE-2026-97312
7.8 - High
- October 13, 2026
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Memory Corruption
Adobe Photoshop Desktop: Incorrect Auth Vulnerability Allows Arbitrary Code Execution
CVE-2026-95639
8.6 - High
- October 13, 2026
Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
AuthZ
Adobe Photoshop OOB Write RCE via Malicious File
CVE-2026-100111
7.8 - High
- October 13, 2026
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Memory Corruption
Adobe Photoshop OOB Write Leads to Arbitrary Code Execution
CVE-2026-104347
7.8 - High
- October 13, 2026
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Memory Corruption
Adobe PS Desktop Integer Overflow Allows Code Exec
CVE-2026-95636
7.8 - High
- October 13, 2026
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Integer Overflow or Wraparound
Adobe Photoshop Desktop Heap Buffer Overflow (CVE-2026-104348)
CVE-2026-104348
7.8 - High
- October 13, 2026
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Heap-based Buffer Overflow
Photoshop Desktop NULL Pointer Deref DoS Vulnerability (CVE-2026-95640)
CVE-2026-95640
5.5 - Medium
- October 13, 2026
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
NULL Pointer Dereference
Adobe Photoshop Desktop OOB Write Leads to Arbitrary Code Exec
CVE-2026-100112
7.8 - High
- October 13, 2026
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Memory Corruption
Adobe Photoshop Desktop OOB Write CSE
CVE-2026-95641
7.8 - High
- October 13, 2026
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Memory Corruption
Adobe Photoshop Integer Overflow -> Arbitrary Code Exec
CVE-2026-75771
7.8 - High
- September 08, 2026
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Integer Overflow or Wraparound
CVE-2026-75631: OOB Write in Adobe Photoshop Arbitrary Execution (User Int.)
CVE-2026-75631
7.8 - High
- September 08, 2026
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Memory Corruption
Photoshop Desktop Integer Over/Wraparound Arbitrary Code Exec (CVE-2026-75862)
CVE-2026-75862
7.8 - High
- September 08, 2026
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Integer Overflow or Wraparound
Adobe Photoshop Desktop Uncontrolled Search Path Element CVE-2026-76199
CVE-2026-76199
8.6 - High
- September 08, 2026
Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
DLL preloading
Adobe Photoshop Desktop OOB Write -> Arbitrary Code Exec (CVE-2026-82005)
CVE-2026-82005
7.8 - High
- September 08, 2026
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Memory Corruption
Adobe Photoshop Desktop Heap Buffer Overflow RCE via Malicious File
CVE-2026-82006
7.8 - High
- September 08, 2026
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Heap-based Buffer Overflow
Adobe Photoshop Int Overflow Arbitrary Code Exec
CVE-2026-82007
7.8 - High
- September 08, 2026
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Integer Overflow or Wraparound
Adobe Photoshop Desktop: Integer Overflow -> Arbitrary Code Exec
CVE-2026-75863
7.8 - High
- September 08, 2026
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Integer Overflow or Wraparound
Photoshop Mobile Sess Fix Priv Escal
CVE-2026-76196
7.4 - High
- September 08, 2026
Photoshop Mobile is affected by a Session Fixation vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain access to sensitive resources. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must interact with a malicious webpage. Scope is changed.
Session Fixation
Adobe Photoshop Mobile: PT Path Limitation Vulnerability
CVE-2026-79904
5 - Medium
- September 08, 2026
Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intended restrictions. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Directory traversal
Adobe Photoshop Installer Uncontrolled Search Path Element CVE-2026-48388
CVE-2026-48388
8.6 - High
- July 28, 2026
Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the installer. Exploitation of this issue required user interaction in that a victim must have been running the installer. Scope is changed.
DLL preloading
Adobe Photoshop Installer: USEP Exploit for Code Exec
CVE-2026-34632
8.6 - High
- April 15, 2026
Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the installer. Exploitation of this issue required user interaction in that a victim must have been running the installer. Scope is changed.
DLL preloading
Out-of-Bounds Read in Photoshop Desktop <=27.4, possible code exec
CVE-2026-27289
7.8 - High
- April 14, 2026
Photoshop Desktop versions 27.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Out-of-bounds Read
Photoshop Desktop <=26.8.1 Heap Buffer Overflow (CVE-2025-61819)
CVE-2025-61819
7.8 - High
- November 11, 2025
Photoshop Desktop versions 26.8.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Heap-based Buffer Overflow
Photoshop Desktop <26.8 OOB Write in File Parsing
CVE-2025-49570
7.8 - High
- August 12, 2025
Photoshop Desktop versions 25.12.3, 26.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Memory Corruption
Adobe Photoshop Desktop <=26.5 Uninitialized Pointer CVE-2025-30326
CVE-2025-30326
7.8 - High
- May 13, 2025
Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Access of Uninitialized Pointer
Adobe Photoshop Desktop <=26.5 Int Underflow—Arbitrary Code Exec
CVE-2025-30324
7.8 - High
- May 13, 2025
Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Integer underflow
Int Overflow in Adobe Photoshop <=26.5 -> Exec (CVE-2025-30325)
CVE-2025-30325
7.8 - High
- May 13, 2025
Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Integer Overflow or Wraparound
Photoshop Desktop 25.12.1/26.4.1 Heap-BO Vulnerability in File Parser
CVE-2025-27198
7.8 - High
- April 08, 2025
Photoshop Desktop versions 25.12.1, 26.4.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Heap-based Buffer Overflow
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Adobe Photoshop or by Adobe? Click the Watch button to subscribe.
