Out-of-Bounds Write Vulnerability in Adobe Lightroom Classic
CVE-2026-48409

7.8HIGH

Key Information:

Vendor

Adobe
Status
Lightroom Classic
Vendor
CVE Published:
11 August 2026

What is CVE-2026-48409?

Adobe Lightroom Classic is vulnerable to an out-of-bounds write issue, potentially allowing arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit, as it involves opening a specially crafted malicious file. As such, users are advised to exercise caution and ensure that they are using updated software to mitigate the risks associated with this vulnerability.

Affected Version(s)

Lightroom Classic 0 <= 15.4, 15.4.1, 15.3, 15.3.1, 15.2, 15.2.1

Lightroom Classic 0 <= 15.4, 15.4.1, 15.3, 15.3.1, 15.2, 15.2.1

Lightroom Classic 15.5

References

https://helpx.adobe.com/security/products/lightroom/apsb2...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.