Adobe Photoshop Heap-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

Vulnerability

A heap-based buffer overflow vulnerability has been identified in Adobe Photoshop Desktop versions 26.8.1 and earlier. This vulnerability could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, as a victim must open a malicious file.

Impact

Exploitation of this vulnerability could result in arbitrary code execution on the affected system.

Remediation

Users are advised to update to version 26.9 or later. For managed environments, IT administrators can deploy updates using the Adobe Admin Console.

Added: Nov 11, 2025, 7:11 PM
Updated: Nov 11, 2025, 7:11 PM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
10.0
exploitability
4.4
remediation
7.7
relevance
1.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.