p PatchFirst

CVE-2026-95638

CVE-2026-95638 · Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS 7.8 · High · EPSS 0.2%

Published
Updated

Affected products and versions

  • photoshop

    Versions
    • ≥ 0, ≤ 27.10: Affected (custom)
    • 27.11: Not affected (custom)

    No fix published

  • photoshop

    Versions
    • ≥ 0, ≤ 26.11.7: Affected (custom)
    • 26.11.8: Not affected (custom)

    No fix published

Original sources

Check your server →