CVE-2022-38434: Adobe Photoshop SVG File Parsing Use-After-Free Remote Code Execution Vulnerability
Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-38434?
The severity of CVE-2022-38434 is high (7.8).
How does CVE-2022-38434 affect Adobe Photoshop?
CVE-2022-38434 affects Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) with a Use After Free vulnerability that could lead to arbitrary code execution.
Is Apple macOS affected by CVE-2022-38434?
No, Apple macOS is not vulnerable to CVE-2022-38434.
Is Microsoft Windows affected by CVE-2022-38434?
No, Microsoft Windows is not vulnerable to CVE-2022-38434.
How can I fix CVE-2022-38434?
To fix CVE-2022-38434, users should update to Adobe Photoshop versions 22.6.1 or 23.4.3, which contain the necessary security patches.