CVE-2026-48407: Lightroom Classic | Out-of-bounds Write (CWE-787)
Published Aug 11, 2026
·Updated
Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
1 affected component
Lightroom Classic
Event History
Aug 11, 2026
CVE Published
via MITRE·05:45 PM
Data Sourced
via MITRE·05:45 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-48407?
The severity of CVE-2026-48407 is high with a CVSS score of 7.8.
2
What type of vulnerability is CVE-2026-48407?
CVE-2026-48407 is an out-of-bounds write vulnerability.
3
How can CVE-2026-48407 be exploited?
CVE-2026-48407 can be exploited by opening a malicious file in Lightroom Classic.
4
What are the potential impacts of CVE-2026-48407?
The potential impacts of CVE-2026-48407 include arbitrary code execution in the context of the current user.
5
Is user interaction required to exploit CVE-2026-48407?
Yes, exploitation of CVE-2026-48407 requires user interaction.