PatchSiren cyber security CVE debrief

CVE-2026-100112 Adobe CVE debrief

Adobe Photoshop Desktop is vulnerable to an out-of-bounds write issue (CWE-787) that could lead to arbitrary code execution if a user opens a malicious file. This vulnerability has a high CVSS score of 7.8, indicating high severity. The issue requires user interaction, as a victim must open a malicious file. Affected users should update their software to the latest version to prevent exploitation. This vulnerability could result in significant impact if exploited, making it crucial for users to take immediate action.

Vendor: Adobe
Product: Photoshop
CVSS: HIGH 7.8
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-10-13
Original CVE updated: 2026-10-14
Advisory published: 2026-10-13
Advisory updated: 2026-10-14

Who should care

Users of Adobe Photoshop Desktop, especially those who handle image files from untrusted sources or require high security for their creative work.

Why it matters

CVE-2026-100112 is a high-severity vulnerability in Adobe Photoshop Desktop that could lead to arbitrary code execution if exploited. Users who open image files from untrusted sources should update their software to the latest version.

Potential arbitrary code execution if a malicious file is opened
Requires user interaction to exploit
High CVSS score of 7.8 indicates high severity
Affected versions need to be updated to prevent exploitation

Technical summary

Adobe Photoshop Desktop is affected by an out-of-bounds write vulnerability (CWE-787) that could result in arbitrary code execution in the context of the current user. This requires user interaction as a victim must open a malicious file. The vulnerability has a high CVSS score of 7.8, indicating high severity. Users should update their software to the latest version to prevent exploitation.

Defensive priority

High priority for users of Adobe Photoshop Desktop, especially those handling image files from untrusted sources.

Recommended defensive actions

Update Adobe Photoshop Desktop to version 27.11 or later
Update Adobe Photoshop Desktop to version 26.11.8 or later for 26.x users
Be cautious when opening image files from untrusted sources

Evidence notes

The CVE record and NVD entry provide details on the vulnerability. Adobe has released a security bulletin addressing this issue. The vulnerability has been publicly disclosed and requires immediate attention from users of Adobe Photoshop Desktop. There is no evidence of public exploitation, but users should exercise caution when opening image files from untrusted sources. The CVE Program and NVD provide additional context and details on this vulnerability.

Sources and references

Verified primary and authoritative sources

CVE-2026-100112 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2026-100112

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2026-100112 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2026-100112

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Photoshop Desktop | Out-of-bounds Write (CWE-787)
Unverified legacy reference

URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/100xxx/CVE-2026-100112.json

cve_program_cvelist_v5
Source reference
Unverified legacy reference

URL: https://www.adobe.com/trust/security/products/photoshop/apsb26-158.html

Supplemental source - vendor-advisory

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.