Heap-based Buffer Overflow in Photoshop Desktop by Adobe
CVE-2026-104348

7.8HIGH

Key Information:

Vendor

Adobe
Status
Photoshop
Vendor
CVE Published:
13 October 2026

What is CVE-2026-104348?

Adobe Photoshop Desktop contains a heap-based buffer overflow vulnerability that may allow an attacker to execute arbitrary code in the context of the current user. Successful exploitation necessitates that the user opens a specially crafted malicious file. This could potentially lead to unauthorized access or damage to the system. Affected users are encouraged to take precautions and apply security updates as recommended by Adobe.

Affected Version(s)

Photoshop 0 <= 27.10

Photoshop 0 <= 26.11.7

Photoshop 27.11

References

https://www.adobe.com/trust/security/products/photoshop/a...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.