Out-of-Bounds Write Vulnerability in Adobe Photoshop Desktop
CVE-2026-96522

7.8HIGH

Key Information:

Vendor

Adobe

Status
Vendor
CVE Published:
13 October 2026

What is CVE-2026-96522?

Adobe Photoshop Desktop is impacted by an out-of-bounds write vulnerability that may lead to arbitrary code execution. This security flaw arises when a user opens a specially crafted malicious file, enabling potential attackers to perform unauthorized actions within the context of the affected user. To mitigate risks, users are advised to avoid opening suspicious files and ensure they are using the latest version with applied security patches.

Affected Version(s)

Photoshop 0 <= 27.10

Photoshop 0 <= 26.11.7

Photoshop 27.11

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.