CVE-2026-104347: Photoshop Desktop | Out-of-bounds Write (CWE-787)
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Users of Adobe Photoshop Desktop are exposed when they open a malicious file. Successful exploitation runs code in the context of the current user.
What does an attacker need to exploit this issue?
An attacker must persuade or otherwise cause a victim to open a malicious file in Photoshop Desktop. The provided information does not indicate that exploitation can occur without user interaction.
What is the impact if exploitation succeeds?
The out-of-bounds write can lead to arbitrary code execution with the privileges of the user currently running Photoshop Desktop. Confidentiality, integrity, and availability impacts are rated high.