CVE-2026-96521: Photoshop Desktop | Out-of-bounds Write (CWE-787)
Published Oct 13, 2026
·Updated
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
1 affected component
Adobe Photoshop Desktop
Event History
Oct 13, 2026
CVE Published
via MITRE·08:27 PM
Data Sourced
via MITRE·08:27 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who is exposed to exploitation?
Users running Adobe Photoshop Desktop are exposed if they open a malicious file. Successful exploitation runs code in the context of the current user.
2
Does exploitation require an attacker to have prior access to the system?
No privileges are required, but the attacker must convince a victim to open a malicious file in Photoshop Desktop.
3
What is the practical impact if exploitation succeeds?
The vulnerability can allow arbitrary code execution with the permissions of the user who opened the malicious file. Confidentiality, integrity, and availability impacts are rated high.