Description
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2026-10-13
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Arbitrary code execution
Action: Apply patch
AI Analysis

Impact

Photoshop Desktop is vulnerable to a heap‑based buffer overflow that can lead to arbitrary code execution in the context of the current user. The flaw occurs when a maliciously crafted file is opened, allowing an attacker to overwrite memory structures and invoke unintended code paths. This type of vulnerability is classified under CWE‑122 and permits the attacker to gain the same privileges as the user opening the file.

Affected Systems

Adobe Photoshop Desktop products are affected; no specific version filtering is available, so all installations of Adobe Photoshop Desktop may be vulnerable until a patch is applied.

Risk and Exploitability

The CVSS score of 7.8 indicates a high severity level, while the EPSS score is less than 1%. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires the victim to actively open a malicious file, making the attack vector user‑interaction based and mitigatable through user awareness and application hardening.

Generated by OpenCVE AI on October 16, 2026 at 03:50 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the latest Adobe Photoshop updates when they become available
  • Configure Photoshop to prompt before opening files from untrusted sources
  • Educate users to avoid opening suspicious or unexpected files

Generated by OpenCVE AI on October 16, 2026 at 03:50 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 16 Oct 2026 10:45:00 +0000

Type Values Removed Values Added
First Time appeared Adobe
Adobe photoshop
Apple
Apple macos
Microsoft
Microsoft windows
CPEs cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Vendors & Products Adobe
Adobe photoshop
Apple
Apple macos
Microsoft
Microsoft windows

Wed, 14 Oct 2026 11:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 20:45:00 +0000

Type Values Removed Values Added
Description Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Title Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)
Weaknesses CWE-122
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

Subscriptions

Adobe Photoshop
Apple Macos
Microsoft Windows
cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published:

Updated: 2026-10-14T10:40:52.085Z

Reserved: 2026-10-01T20:25:32.542Z

Link: CVE-2026-104348

cve-icon Vulnrichment

Updated: 2026-10-14T10:39:35.277Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-13T21:17:25.593

Modified: 2026-10-16T10:37:08.473

Link: CVE-2026-104348

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-24T03:45:17Z

Weaknesses
  • CWE-122

    Heap-based Buffer Overflow