Adobe Photoshop Popular Photo Editing Software

Adobe Photoshop Desktop OOB Write Arbitrary Code Exec (User Interaction)
CVE-2026-96521 7.8 - High - October 13, 2026

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Photoshop Desktop OOB Write -> ATE via Malicious File
CVE-2026-96522 7.8 - High - October 13, 2026

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Photoshop Desktop Integer Overflow Enables Arbitrary Code Execution
CVE-2026-83661 7.8 - High - October 13, 2026

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Integer Overflow or Wraparound

Photoshop Desktop DoubleFree Arbitrary Code Exec
CVE-2026-95635 7.8 - High - October 13, 2026

Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Double-free

Adobe Photoshop Desktop Heap Buffer Overflow (CVE-2026-95638)
CVE-2026-95638 7.8 - High - October 13, 2026

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Heap-based Buffer Overflow

Photoshop Desktop OOB Write Arbitrary Code Exec via Malicious File
CVE-2026-96523 7.8 - High - October 13, 2026

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Photoshop Desktop OOB Write Arbitrary Code Execution
CVE-2026-95637 7.8 - High - October 13, 2026

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Photoshop Desktop RCE via OOB Write
CVE-2026-97312 7.8 - High - October 13, 2026

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Photoshop Desktop: Incorrect Auth Vulnerability Allows Arbitrary Code Execution
CVE-2026-95639 8.6 - High - October 13, 2026

Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

AuthZ

Adobe PS Desktop Integer Overflow Allows Code Exec
CVE-2026-95636 7.8 - High - October 13, 2026

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Integer Overflow or Wraparound

Photoshop Desktop NULL Pointer Deref DoS Vulnerability (CVE-2026-95640)
CVE-2026-95640 5.5 - Medium - October 13, 2026

Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

NULL Pointer Dereference

Adobe Photoshop Desktop OOB Write CSE
CVE-2026-95641 7.8 - High - October 13, 2026

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Photoshop Integer Overflow -> Arbitrary Code Exec
CVE-2026-75771 7.8 - High - September 08, 2026

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Integer Overflow or Wraparound

CVE-2026-75631: OOB Write in Adobe Photoshop Arbitrary Execution (User Int.)
CVE-2026-75631 7.8 - High - September 08, 2026

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Photoshop Desktop Integer Over/Wraparound Arbitrary Code Exec (CVE-2026-75862)
CVE-2026-75862 7.8 - High - September 08, 2026

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Integer Overflow or Wraparound

Adobe Photoshop Desktop Uncontrolled Search Path Element CVE-2026-76199
CVE-2026-76199 8.6 - High - September 08, 2026

Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

DLL preloading

Adobe Photoshop Desktop OOB Write -> Arbitrary Code Exec (CVE-2026-82005)
CVE-2026-82005 7.8 - High - September 08, 2026

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Photoshop Desktop Heap Buffer Overflow RCE via Malicious File
CVE-2026-82006 7.8 - High - September 08, 2026

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Heap-based Buffer Overflow

Adobe Photoshop Int Overflow Arbitrary Code Exec
CVE-2026-82007 7.8 - High - September 08, 2026

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Integer Overflow or Wraparound

Adobe Photoshop Desktop: Integer Overflow -> Arbitrary Code Exec
CVE-2026-75863 7.8 - High - September 08, 2026

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Integer Overflow or Wraparound

Photoshop Mobile Sess Fix Priv Escal
CVE-2026-76196 7.4 - High - September 08, 2026

Photoshop Mobile is affected by a Session Fixation vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain access to sensitive resources. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must interact with a malicious webpage. Scope is changed.

Session Fixation

Adobe Photoshop Mobile: PT Path Limitation Vulnerability
CVE-2026-79904 5 - Medium - September 08, 2026

Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intended restrictions. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Directory traversal

Adobe Photoshop Installer Uncontrolled Search Path Element CVE-2026-48388
CVE-2026-48388 8.6 - High - July 28, 2026

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the installer. Exploitation of this issue required user interaction in that a victim must have been running the installer. Scope is changed.

DLL preloading

Adobe Photoshop Installer: USEP Exploit for Code Exec
CVE-2026-34632 8.6 - High - April 15, 2026

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the installer. Exploitation of this issue required user interaction in that a victim must have been running the installer. Scope is changed.

DLL preloading

Out-of-Bounds Read in Photoshop Desktop <=27.4, possible code exec
CVE-2026-27289 7.8 - High - April 14, 2026

Photoshop Desktop versions 27.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Photoshop Desktop <=26.8.1 Heap Buffer Overflow (CVE-2025-61819)
CVE-2025-61819 7.8 - High - November 11, 2025

Photoshop Desktop versions 26.8.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Heap-based Buffer Overflow

Photoshop Desktop <26.8 OOB Write in File Parsing
CVE-2025-49570 7.8 - High - August 12, 2025

Photoshop Desktop versions 25.12.3, 26.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Photoshop Desktop <=26.5 Int Underflow—Arbitrary Code Exec
CVE-2025-30324 7.8 - High - May 13, 2025

Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Integer underflow

Int Overflow in Adobe Photoshop <=26.5 -> Exec (CVE-2025-30325)
CVE-2025-30325 7.8 - High - May 13, 2025

Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Integer Overflow or Wraparound

Adobe Photoshop Desktop <=26.5 Uninitialized Pointer CVE-2025-30326
CVE-2025-30326 7.8 - High - May 13, 2025

Photoshop Desktop versions 26.5, 25.12.2 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Access of Uninitialized Pointer

Photoshop Desktop 25.12.1/26.4.1 Heap-BO Vulnerability in File Parser
CVE-2025-27198 7.8 - High - April 08, 2025

Photoshop Desktop versions 25.12.1, 26.4.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Heap-based Buffer Overflow

Photoshop Desktop Unctrl Search Path Vuln CVE-2025-21127 (pre 27.0)
CVE-2025-21127 7.8 - High - January 14, 2025

Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could lead to arbitrary code execution. An attacker could manipulate the search path environment variable to point to a malicious library, resulting in the execution of arbitrary code when the application loads. Exploitation of this issue requires user interaction in that a victim must run the vulnerable application.

DLL preloading

Adobe Photoshop to 26.1 Integer Underflow (Wrap) CVE-2025-21122
CVE-2025-21122 7.8 - High - January 14, 2025

Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Integer underflow

Adobe Photoshop Use After Free Vulnerability in File Handling
CVE-2024-52997 7.8 - High - December 10, 2024

Photoshop Desktop versions 26.0 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Dangling pointer

Integer Underflow in Adobe Photoshop Desktop 25.11 (Arbitrary Code Exec)
CVE-2024-49514 7.8 - High - November 12, 2024

Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Integer underflow

Adobe Photoshop Desktop <=25.11 Heap Overflow Arbitrary Code Exec
CVE-2024-43756 7.8 - High - September 13, 2024

Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Buffer Overflow

Photoshop OOB Write Arbitrary Code Exec (25.11)
CVE-2024-43760 7.8 - High - September 13, 2024

Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Photoshop Desktop OOB Write Vulnerability (25.11)
CVE-2024-45108 7.8 - High - September 13, 2024

Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Photoshop Desktop OOB Write CVE-2024-45109 <25.11 Exec
CVE-2024-45109 7.8 - High - September 13, 2024

Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Use-After-Free in Adobe Photoshop Desktop (v24.7.3/25.9.1-) Arbitrary Code Exec
CVE-2024-34117 7.8 - High - August 14, 2024

Photoshop Desktop versions 24.7.3, 25.9.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Dangling pointer

Adobe Photoshop Desktop OOB Read 24.7.3/25.7 Code Exec via Malicious File
CVE-2024-20753 7.8 - High - June 13, 2024

Photoshop Desktop versions 24.7.3, 25.7 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

OOB Read in Photoshop Desktop <24.7.2: Sensitive Data Leak
CVE-2024-20770 5.5 - Medium - April 10, 2024

Photoshop Desktop versions 24.7.2, 25.3.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Photoshop <=25.0 OOB Write CVE-2023-44330
CVE-2023-44330 7.8 - High - November 16, 2023

Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Photoshop 24.7.1 & 25.0 - OOBR Memory Disclosure & ASLR Bypass
CVE-2023-44335 - November 16, 2023

Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Photoshop OOB Read <25.0 Disclosure
CVE-2023-44331 5.5 - Medium - November 16, 2023

Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Photoshop <=25.0 OOB Read CVE-2023-44332
CVE-2023-44332 - November 16, 2023

Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Photoshop OOB Read in 24.7.1/25.0 via Malicious File
CVE-2023-44333 5.5 - Medium - November 16, 2023

Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Photoshop 24.7.125.0 OOB RA Memory Disclosure
CVE-2023-44334 - November 16, 2023

Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Photoshop AOU-Ptr Vulnerability (24.7)
CVE-2023-26370 7.8 - High - October 11, 2023

Adobe Photoshop versions 23.5.5 (and earlier) and 24.7 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Access of Uninitialized Pointer

OOB Write in Adobe Photoshop Image Parser (v23.0.2/22.5.4)
CVE-2021-43018 7.8 - High - September 07, 2023

Adobe Photoshop versions 23.0.2 and 22.5.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious JPG file.

Memory Corruption