First published: Tue Aug 17 2021(Updated: )
Adobe Photoshop versions 21.2.10 (and earlier) and 22.4.3 (and earlier) are affected by a heap-based buffer overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Photoshop | >=21.2.0<=21.2.10 | |
Adobe Photoshop | >=22.4.0<=22.4.3 | |
Apple macOS | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this Adobe Photoshop vulnerability is CVE-2021-36065.
Adobe Photoshop versions 21.2.10 (and earlier) and 22.4.3 (and earlier) are affected by this vulnerability.
The severity rating of CVE-2021-36065 is 7.8 (Critical).
The vulnerability CVE-2021-36065 can result in arbitrary code execution in the context of the current user if exploited. User interaction is required for exploitation.
You can find more information about the CVE-2021-36065 vulnerability on the Adobe website at https://helpx.adobe.com/security/products/photoshop/apsb21-68.html.