Adobe Photoshop Desktop contains an out‑of‑bounds write flaw that lets a crafted file overwrite memory and execute code in the context of the current user. This memory corruption can allow an attacker to gain arbitrary code execution with the victim’s privileges, potentially compromising the workstation or any applications running under that user account.

All versions of Adobe Photoshop Desktop are listed as affected; no version qualifiers are provided, so every customer installing the product is potentially at risk.

The CVSS score of 7.8 indicates a high severity vulnerability. The EPSS score of < 1 % suggests that exploitation in the wild is currently very low, and the issue is not in the CISA KEV catalog. Because the flaw requires the victim to open a malicious file, the attack vector is user‑interaction based, which limits its use but still presents a significant risk if users are tricked into opening deceptive documents.