PatchSiren cyber security CVE debrief

CVE-2026-95641 Adobe CVE debrief

Adobe Photoshop Desktop is vulnerable to an out-of-bounds write issue (CWE-787) that could lead to arbitrary code execution if a user opens a malicious file. This vulnerability has a high CVSS score of 7.8, indicating high severity. Users of Adobe Photoshop Desktop, especially those handling image files from untrusted sources or working with sensitive data, should assess their exposure and take necessary actions to protect their systems. The CVE record and source item provide details on the vulnerability, and Adobe has released a security bulletin (APSB26-158) addressing this issue.

Vendor: Adobe
Product: Photoshop
CVSS: HIGH 7.8
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-10-13
Original CVE updated: 2026-10-14
Advisory published: 2026-10-13
Advisory updated: 2026-10-14

Who should care

Users of Adobe Photoshop Desktop, especially those who handle image files from untrusted sources or work with sensitive data, should assess their exposure and take necessary actions to protect their systems.

Why it matters

This vulnerability in Adobe Photoshop Desktop could lead to arbitrary code execution if exploited. Users should update to the latest version and be cautious with image files from untrusted sources.

Potential arbitrary code execution if a user opens a malicious file
High CVSS score of 7.8 indicating a high severity vulnerability
Requires user interaction to exploit

Technical summary

Adobe Photoshop Desktop is affected by an out-of-bounds write vulnerability (CWE-787) that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability has a high CVSS score of 7.8, indicating high severity. Users should update to the latest version and be cautious with image files from untrusted sources.

Defensive priority

High priority for users of Adobe Photoshop Desktop, especially those handling image files from untrusted sources.

Recommended defensive actions

Update Adobe Photoshop Desktop to version 27.11 or later
Update Adobe Photoshop Desktop to version 26.11.8 or later for older versions
Be cautious when opening image files from untrusted sources

Evidence notes

The CVE record and source item provide details on the vulnerability. Adobe has released a security bulletin (APSB26-158) addressing this issue. The vulnerability has a CVSS score of 7.8, indicating high severity. Users should update to the latest version and be cautious with image files from untrusted sources. The vulnerability requires user interaction, specifically opening a malicious file. There is no information on known or unknown affected scope beyond Adobe Photoshop Desktop. Def

Sources and references

Verified primary and authoritative sources

CVE-2026-95641 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2026-95641

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2026-95641 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2026-95641

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Photoshop Desktop | Out-of-bounds Write (CWE-787)
Unverified legacy reference

URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/95xxx/CVE-2026-95641.json

cve_program_cvelist_v5
Source reference
Unverified legacy reference

URL: https://www.adobe.com/trust/security/products/photoshop/apsb26-158.html

Supplemental source - vendor-advisory

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.