CVE-2026-75631: Out-of-bounds Write (CWE-787) in Adobe Photoshop 2026

CVE-2026-75631 is an out-of-bounds write vulnerability (CWE-787) in Adobe Photoshop 2026 that can lead to arbitrary code execution in the context of the current user. Successful exploitation requires the victim to open a crafted malicious file, triggering the vulnerability. The flaw affects Photoshop versions up to 27.6 and 26.11.6 inclusive. No vendor advisory or patch information is provided, and no known exploits are reported in the wild.

If exploited, this vulnerability could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the user's environment. However, exploitation requires user interaction by opening a malicious file, which limits the attack vector to targeted or social engineering scenarios.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should exercise caution when opening files from untrusted sources and consider applying any available security controls to limit exposure.