Adobe Lightroom Classic vulnerabilities

CVE-2026-48397 [HIGH] CWE-502 CVE-2026-48397: Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

CVE-2026-48441 [HIGH] CWE-22 CVE-2026-48441: Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Pa Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in

CVE-2026-48404 [HIGH] CWE-787 CVE-2026-48404: Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-48407 [HIGH] CWE-787 CVE-2026-48407: Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-48408 [HIGH] CWE-787 CVE-2026-48408: Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-48405 [HIGH] CWE-787 CVE-2026-48405: Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-48406 [HIGH] CWE-787 CVE-2026-48406: Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-48409 [HIGH] CWE-787 CVE-2026-48409: Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-48410 [HIGH] CWE-787 CVE-2026-48410: Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-47940 [HIGH] CWE-190 CVE-2026-47940: Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result i Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-48447 [HIGH] CWE-863 CVE-2026-48447: Lightroom Classic is affected by an Incorrect Authorization vulnerability that could result in arbit Lightroom Classic is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a v

CVE-2021-40776 [MEDIUM] CWE-379 CVE-2021-40776: Adobe Lightroom Classic 10.3 (and earlier) are affected by a privilege escalation vulnerability in t Adobe Lightroom Classic 10.3 (and earlier) are affected by a privilege escalation vulnerability in the Offline Lightroom Classic installer. An authenticated attacker could leverage this vulnerability to escalate privileges. User interaction is required before product installation to abuse this vulnerability.