First published: Wed Mar 25 2020(Updated: )
Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Photoshop 2020 | >=21.0<=21.1 | |
Adobe Photoshop CC | >=20.0<=20.0.8 | |
Apple macOS | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-3785 is a memory corruption vulnerability found in Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier.
The severity of CVE-2020-3785 is rated as critical with a CVSS score of 9.8.
Successful exploitation of CVE-2020-3785 could lead to arbitrary code execution in Adobe Photoshop.
Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier are affected by CVE-2020-3785.
No, Apple macOS and Microsoft Windows are not vulnerable to CVE-2020-3785.
To fix CVE-2020-3785, it is recommended to update Adobe Photoshop to the latest version available.