CVE-2026-83661
7.8HighPublished 13 Oct 2026 · NVD status: Undergoing Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
- Impact
- Full C/I/A compromise
- Weakness
- CWE-190
Impact
An attacker can achieve arbitrary code execution in the context of the logged-in user. To trigger it, a local user must open a maliciously crafted file.
Root cause
An integer overflow or wraparound condition occurs when parsing untrusted files.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade Photoshop Desktop to the patched version referenced in Adobe advisory APSB26-158 once identified; do not open untrusted image or project files in the meantime.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.