CVE-2026-95636
7.8HighPublished 13 Oct 2026 · NVD status: Undergoing Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
- Impact
- Full C/I/A compromise
- Weakness
- CWE-190
Impact
Attackers can achieve arbitrary code execution under the privileges of the local user. Exploitation requires convincing a user to open a crafted, malicious file in Photoshop.
Root cause
An integer overflow or wraparound flaw triggers during the processing of malicious files, corrupting memory.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade Photoshop Desktop to the fixed version specified in Adobe advisory apsb26-158. If immediate patching is not possible, warn users to avoid opening untrusted or unsolicited Photoshop files.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.