CVE-2026-95637: Out-of-bounds Write (CWE-787) in Adobe Photoshop

CVE-2026-95637 is an out-of-bounds write vulnerability in Adobe Photoshop Desktop. This vulnerability could enable an attacker to execute arbitrary code in the context of the current user if the victim opens a crafted malicious file. The vulnerability affects Photoshop versions up to 27.10 and 26.11.7. The CVSS 3.1 base score is 7.8, reflecting a high severity with local attack vector, low attack complexity, no privileges required, but user interaction is necessary. Confidentiality, integrity, and availability impacts are all rated high.

Successful exploitation could lead to arbitrary code execution with the privileges of the current user, potentially compromising confidentiality, integrity, and availability of the affected system. However, exploitation requires user interaction (opening a malicious file), which limits the attack vector to targeted or socially engineered attacks.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the Adobe vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening files from untrusted sources.