CVE-2026-96523: Photoshop Desktop | Out-of-bounds Write (CWE-787)
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to exploitation?
Users of Adobe Photoshop Desktop are exposed if they open a malicious file. Successful exploitation runs code in the context of the current user.
What does an attacker need to exploit this issue?
An attacker must persuade a victim to open a malicious file in Photoshop Desktop. The vector is local and requires user interaction; no privileges are required before exploitation.
What should users do while remediation is pending?
Do not open untrusted or unexpected files in Photoshop Desktop, especially files received through unsolicited messages or downloaded from untrusted sources. The provided data does not specify a patch version or workaround.