CVE-2026-95639: Photoshop Desktop | Incorrect Authorization (CWE-863)
Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Users of Adobe Photoshop Desktop are exposed if they open a malicious file. Successful exploitation runs code in the context of the current user.
What does an attacker need to exploit it?
The attacker must persuade a victim to open a malicious file. No privileges are required before exploitation, but user interaction is required.
What is the potential impact of successful exploitation?
An attacker could execute arbitrary code with the current user's privileges. The reported impact includes high confidentiality, integrity, and availability effects, and the vulnerability has changed scope.