Skip to content
OpenAdvisories
High WID-SEC-2026-3931 18 CVEs

Adobe Photoshop: Mehrere Schwachstellen

Published Oct 13, 2026 · Updated Oct 15, 2026 · Revision 2 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in Adobe Photoshop ausnutzen, um beliebigen Programmcode auszuführen und Denial of Service Attacken durchzuführen.

Product

Photoshop ist eine Bildbearbeitungssoftware von Adobe.

Vulnerabilities 18

  • High 8.6

    Photoshop Desktop | Incorrect Authorization (CWE-863)

    Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requ…

  • High 7.8

    Photoshop Desktop | Out-of-bounds Write (CWE-787)

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • High 7.8

    Photoshop Desktop | Out-of-bounds Write (CWE-787)

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • High 7.8

    Photoshop Desktop | Out-of-bounds Write (CWE-787)

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • High 7.8

    Photoshop Desktop | Out-of-bounds Write (CWE-787)

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • High 7.8

    Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)

    Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • High 7.8

    Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)

    Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • High 7.8

    Photoshop Desktop | Double Free (CWE-415)

    Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user int…

  • High 7.8

    Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)

    Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • High 7.8

    Photoshop Desktop | Out-of-bounds Write (CWE-787)

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • High 7.8

    Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)

    Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • High 7.8

    Photoshop Desktop | Out-of-bounds Write (CWE-787)

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • High 7.8

    Photoshop Desktop | Out-of-bounds Write (CWE-787)

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • High 7.8

    Photoshop Desktop | Out-of-bounds Write (CWE-787)

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • High 7.8

    Photoshop Desktop | Out-of-bounds Write (CWE-787)

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • High 7.8

    Photoshop Desktop | Out-of-bounds Write (CWE-787)

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  • Medium 5.5

    Photoshop Desktop | NULL Pointer Dereference (CWE-476)

    Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of t…

  • Medium 5.5

    Photoshop Desktop | NULL Pointer Dereference (CWE-476)

    Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of t…

Revision history

  1. #2

    Referenz(en) aufgenommen: ZDI-26-778, ZDI-CAN-32599, ZDI-26-777, ZDI-CAN-31140

  2. #1

    Initiale Fassung

References