cbcvebase.

Adobe Photoshop vulnerabilities

120 known vulnerabilities affecting adobe/photoshop.

Total CVEs
120
CISA KEV
0
Public exploits
6
Exploited in wild
0
Severity breakdown
CRITICAL10HIGH92MEDIUM16LOW2

Vulnerabilities

Page 2 of 6
CVE-2021-21047P3HIGHCVSS 7.8≤ 21.2.4≥ 22.0, ≤ 22.1.1+1 more2021-02-11
CVE-2021-21047 [HIGH] CWE-787 CVE-2021-21047: Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by an Out-of-bou Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by an Out-of-bounds Write vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fi
nvd
CVE-2021-36066P3HIGHCVSS 7.8≥ 21.2.0, ≤ 21.2.10≥ 22.4.0, ≤ 22.4.3+1 more2021-09-01
CVE-2021-36066 [HIGH] CWE-787 CVE-2021-36066: Adobe Photoshop versions 21.2.10 (and earlier) and 22.4.3 (and earlier) are affected by an out-of-bo Adobe Photoshop versions 21.2.10 (and earlier) and 22.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2021-21067P3HIGHCVSS 7.8≥ unspecified, ≤ 22.22021-03-12
CVE-2021-21067 [HIGH] CWE-787 CVE-2021-21067: Adobe Photoshop versions 21.2.5 (and earlier) and 22.2 (and earlier) are affected by an Out-of-bound Adobe Photoshop versions 21.2.5 (and earlier) and 22.2 (and earlier) are affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mu
nvd
CVE-2022-28277P3HIGHCVSS 7.8≤ 22.5.6≥ 23.0.0, ≤ 23.2.2+1 more2022-05-06
CVE-2022-28277 [HIGH] CWE-787 CVE-2022-28277: Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) are affected by an out-of-bou Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PDF file.
nvd
CVE-2026-82005P3HIGHCVSS 7.8≥ 26.0, < 26.11.7≥ 27.0, < 27.72026-09-08
CVE-2026-82005 [HIGH] CWE-787 CVE-2026-82005: Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-75631P3HIGHCVSS 7.8≥ 26.0, < 26.11.7≥ 27.0, < 27.72026-09-08
CVE-2026-75631 [HIGH] CWE-787 CVE-2026-75631: Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-95641P3HIGHCVSS 7.8fixed in 26.11.8≥ 27.0, < 27.11+1 more2026-10-13
CVE-2026-95641 [HIGH] CWE-787 CVE-2026-95641: Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-97312P3HIGHCVSS 7.8fixed in 26.11.8≥ 27.0, < 27.11+1 more2026-10-13
CVE-2026-97312 [HIGH] CWE-787 CVE-2026-97312: Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-95637P3HIGHCVSS 7.8fixed in 26.11.8≥ 27.0, < 27.11+1 more2026-10-13
CVE-2026-95637 [HIGH] CWE-787 CVE-2026-95637: Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-96523P3HIGHCVSS 7.8fixed in 26.11.8≥ 27.0, < 27.11+1 more2026-10-13
CVE-2026-96523 [HIGH] CWE-787 CVE-2026-96523: Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-96521P3HIGHCVSS 7.8≤ 27.102026-10-13
CVE-2026-96521 [HIGH] CWE-787 CVE-2026-96521: Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-96522P3HIGHCVSS 7.8fixed in 26.11.8≥ 27.0, < 27.11+1 more2026-10-13
CVE-2026-96522 [HIGH] CWE-787 CVE-2026-96522: Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-104346P3HIGHCVSS 7.8fixed in 26.11.8≥ 27.0, < 27.11+1 more2026-10-13
CVE-2026-104346 [HIGH] CWE-787 CVE-2026-104346: Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-100112P3HIGHCVSS 7.8fixed in 26.11.8≥ 27.0, < 27.11+1 more2026-10-13
CVE-2026-100112 [HIGH] CWE-787 CVE-2026-100112: Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-104347P3HIGHCVSS 7.8fixed in 26.11.8≥ 27.0, < 27.11+1 more2026-10-13
CVE-2026-104347 [HIGH] CWE-787 CVE-2026-104347: Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2026-100111P3HIGHCVSS 7.8fixed in 26.11.8≥ 27.0, < 27.11+1 more2026-10-13
CVE-2026-100111 [HIGH] CWE-787 CVE-2026-100111: Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2021-36065P3HIGHCVSS 7.8≥ 21.2.0, ≤ 21.2.10≥ 22.4.0, ≤ 22.4.3+1 more2021-09-01
CVE-2021-36065 [HIGH] CWE-122 CVE-2021-36065: Adobe Photoshop versions 21.2.10 (and earlier) and 22.4.3 (and earlier) are affected by a heap-based Adobe Photoshop versions 21.2.10 (and earlier) and 22.4.3 (and earlier) are affected by a heap-based buffer overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2022-23203P3HIGHCVSS 7.8≤ 22.5.4≥ 23.0, ≤ 23.1+1 more2022-02-16
CVE-2022-23203 [HIGH] CWE-120 CVE-2022-23203: Adobe Photoshop versions 22.5.4 (and earlier) and 23.1 (and earlier) are affected by a buffer overfl Adobe Photoshop versions 22.5.4 (and earlier) and 23.1 (and earlier) are affected by a buffer overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in Photoshop.
nvd
CVE-2021-21082P3HIGHCVSS 7.8≥ 21.0, ≤ 21.2.5≥ 22.0, ≤ 22.2+1 more2021-03-12
CVE-2021-21082 [HIGH] CWE-788 CVE-2021-21082: Adobe Photoshop versions 21.2.5 (and earlier) and 22.2 (and earlier) are affected by a Memory Corrup Adobe Photoshop versions 21.2.5 (and earlier) and 22.2 (and earlier) are affected by a Memory Corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that
nvd
CVE-2021-40709P3HIGHCVSS 7.8≥ unspecified, ≤ 21.2.112021-09-27
CVE-2021-40709 [HIGH] CWE-120 CVE-2021-40709: Adobe Photoshop versions 21.2.11 (and earlier) and 22.5 (and earlier) are affected by a Buffer Overf Adobe Photoshop versions 21.2.11 (and earlier) and 22.5 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted SVG file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in th
nvd