CVE-2026-21349
published 2026-02-10CVE-2026-21349: Lightroom Desktop versions 15.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context…
high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
Lightroom Desktop versions 15.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | lightroom | < 14.5.2 | 14.5.2 |
| adobe | lightroom | >= 15.0 < 15.1.1 | 15.1.1 |
| adobe | lightroom_desktop | <= 15.1 | — |