Adobe Photoshop Desktop is vulnerable to an out‑of‑bounds write that can lead to arbitrary code execution in the context of the current user. The exploitation involves manipulating the application’s memory handling of a malicious file. It is a classic buffer overflow flaw that allows the attacker to control program execution once the file is opened.

Adobe Photoshop Desktop on all platforms for which the vulnerability applies. No specific version ranges are listed, so any installation relying on the affected component is potentially at risk.

The CVSS score of 7.8 indicates a high severity, and the EPSS score is less than 1%. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the attack vector is client‑side user interaction because exploitation requires the victim to open a malicious file. An attacker who convinces a user to open the crafted asset can achieve code execution with the user’s privileges. The EPSS score of less than 1% indicates a very low exploitation probability, but the high CVSS still warrants prompt attention.