Skip to content
OpenAdvisories
Medium WID-SEC-2025-0086 2 CVEs

Adobe Photoshop: Mehrere Schwachstellen ermöglichen Codeausführung

Published Jan 14, 2025 · Updated Jan 14, 2025 · de-DE

Vendor: Adobe Product: Photoshop Platform: macOS Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Photoshop ausnutzen, um beliebigen Programmcode auszuführen.

Product

Photoshop ist eine Bildbearbeitungssoftware von Adobe.

Vulnerabilities 2

  • High 7.8
    CVE-2025-21122

    Photoshop Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)

    Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction i…

    Adobe Photoshop Desktop
  • High 7.8
    CVE-2025-21127

    Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)

    Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could lead to arbitrary code execution. An attacker could manipulate the search path environment variable to point to a malicious library…

    Adobe Photoshop Desktop

Revision history

  1. #1

    Initiale Fassung

References