CVE-2026-100111: Out-of-bounds Write (CWE-787) in Adobe Photoshop

CVE-2026-100111 is an out-of-bounds write vulnerability in Adobe Photoshop Desktop that may lead to arbitrary code execution in the context of the current user. The flaw requires a victim to open a crafted malicious file to trigger the vulnerability. This vulnerability affects Photoshop versions up to and including 27.10 and 26.11.7. The CVSS 3.1 vector indicates local attack vector with low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the affected system under that user's context. The requirement for user interaction limits the attack vector to scenarios where a user opens a malicious file.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid opening files from untrusted sources. Monitor Adobe's security advisories for updates and apply patches promptly once released.