CVE-2026-100112: Out-of-bounds Write (CWE-787) in Adobe Photoshop

CVE-2026-100112 is an out-of-bounds write vulnerability (CWE-787) in Adobe Photoshop Desktop. This flaw allows an attacker to execute arbitrary code in the context of the current user if the victim opens a crafted malicious file. The vulnerability affects Photoshop versions up to 27.10 and 26.11.7. The CVSS v3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability.

Successful exploitation can result in arbitrary code execution with the privileges of the current user, potentially leading to full compromise of the user's environment within the scope of Photoshop's permissions. The attack requires the victim to open a malicious file, so social engineering or tricking the user is necessary.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid opening files from untrusted sources. Monitor Adobe's security advisories for updates and apply patches promptly once released.