Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Fix
Patch, vendor advisory and mitigation references on NVD 1
Vendor advisories in the News 1
- ZDI-26-778: Adobe Photoshop DCM Pixel Data Parsing Integer Overflow Remote Code Execution Vulnerability Zero Day Initiative: published advisories · 2026-10-15
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 3
- Cpes+1 CPE criteria (now 1)NVD modified 2026-10-22 17:52
- StatusUndergoing Analysis → AnalyzedNVD modified 2026-10-22 17:52
- First seenCVSS 7.8NVD modified 2026-10-14 15:50
Affected (CPE criteria) 1
cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*