Out-of-Bounds Read Vulnerability in Adobe Photoshop Desktop
CVE-2026-118200

5.5MEDIUM

Key Information:

Vendor

Adobe

Status
Vendor
CVE Published:
10 November 2026

What is CVE-2026-118200?

Adobe Photoshop Desktop is vulnerable to an out-of-bounds read issue that can lead to the exposure of sensitive memory content. This vulnerability requires user interaction, as an attacker must entice a victim to open a specially crafted malicious file. Once exploited, it may allow unauthorized access to confidential information stored in memory, posing potential risks to user privacy and data security. Ensuring users are aware of the dangers associated with opening unknown or suspicious files can mitigate exploitation risks.

Affected Version(s)

Photoshop 0 <= 26.11.8

Photoshop 0 <= 27.11

Photoshop 28.0

References

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.