p PatchFirst

CVE-2026-105896

CVE-2026-105896 · Photoshop Desktop | NULL Pointer Dereference (CWE-476)

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS 5.5 · Medium · EPSS 0.1% · Fix available

Published
Updated

Affected products and versions

  • photoshop

    Versions
    • ≥ 0, ≤ 27.10: Affected (custom)
    • 27.11: Not affected (custom)

    Update to 27.11

  • photoshop

    Versions
    • ≥ 0, ≤ 26.11.7: Affected (custom)
    • 26.11.8: Not affected (custom)

    Update to 26.11.8

Original sources

Check your server →