CVE-2026-48409: Lightroom Classic | Out-of-bounds Write (CWE-787)
Published Aug 11, 2026
·Updated
Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
1 affected component
Lightroom Classic
Event History
Aug 11, 2026
CVE Published
via MITRE·05:45 PM
Data Sourced
via MITRE·05:45 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-48409?
The severity of CVE-2026-48409 is rated high, with a score of 7.8.
2
What type of vulnerability is CVE-2026-48409?
CVE-2026-48409 is an out-of-bounds write vulnerability.
3
What can happen if CVE-2026-48409 is exploited?
Exploitation of CVE-2026-48409 could lead to arbitrary code execution in the context of the current user.
4
What does a user need to do for CVE-2026-48409 to be exploited?
For CVE-2026-48409 to be exploited, the user must open a malicious file.
5
Is user interaction required to exploit CVE-2026-48409?
Yes, user interaction is required to exploit CVE-2026-48409.