CVE-2026-95641: Photoshop Desktop | Out-of-bounds Write (CWE-787)
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to exploitation?
Users running Adobe Photoshop Desktop are exposed if they open a malicious file. Successful exploitation could execute code with the privileges of the current user.
What does an attacker need to exploit this issue?
An attacker needs to persuade or otherwise cause a victim to open a malicious file in Photoshop Desktop. The provided information does not indicate that remote exploitation without user interaction is possible.
What should be prioritized while awaiting a fix?
Avoid opening untrusted or unsolicited files in Photoshop Desktop, especially files received through email, downloads, or other unverified sources. User interaction is required for exploitation.