CVE-2026-82005: Out-of-bounds Write (CWE-787) in Adobe Photoshop 2026

CVE-2026-82005 is an out-of-bounds write vulnerability in Adobe Photoshop 2026 that may allow an attacker to execute arbitrary code in the context of the current user. Successful exploitation requires the victim to open a crafted malicious file, which triggers the vulnerability. The flaw affects Photoshop versions up to 27.6 and 26.11.6. The vulnerability has a CVSS 3.1 base score of 7.8, reflecting high impact on confidentiality, integrity, and availability.

If exploited, this vulnerability could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the affected system's user context. The attack requires user interaction, limiting remote exploitation to scenarios where a user opens a malicious file.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the Adobe vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening files from untrusted sources.