CVE-2026-95638: Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
Who is exposed to exploitation?
Users of Adobe Photoshop Desktop are exposed when they open a malicious file. Successful exploitation executes code in the context of the current user.
Does an attacker need prior access or privileges?
No prior privileges are required according to the provided CVSS vector. However, exploitation requires user interaction: the victim must open a malicious file.
What is the potential impact of successful exploitation?
A successful exploit could result in arbitrary code execution with the permissions of the current user. The vulnerability is rated high severity with a CVSS score of 7.8.