CVE-2026-105896: Photoshop Desktop | NULL Pointer Dereference (CWE-476)
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Users of Adobe Photoshop Desktop who open files from untrusted or unknown sources are exposed. Exploitation requires the victim to open a malicious file in the application.
What is the likely impact if exploitation succeeds?
The attacker can cause Photoshop Desktop to crash, creating an application-level denial-of-service condition. The provided information does not indicate confidentiality or integrity impact.
What can be done while a fix is not available or cannot be applied immediately?
Avoid opening untrusted files in Photoshop Desktop, particularly files received through unsolicited messages or from unknown sources. Review file provenance before opening files in the application.