CVE-2026-104347: Photoshop Desktop | Out-of-bounds Write (CWE-787)
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
Who is exposed to this vulnerability?
Users of Adobe Photoshop Desktop are exposed when they open a malicious file. Successful exploitation runs code in the context of the current user.
What does an attacker need to exploit this issue?
An attacker must persuade or otherwise cause a victim to open a malicious file in Photoshop Desktop. The provided information does not indicate that exploitation can occur without user interaction.
What is the impact if exploitation succeeds?
The out-of-bounds write can lead to arbitrary code execution with the privileges of the user currently running Photoshop Desktop. Confidentiality, integrity, and availability impacts are rated high.