CVE-2026-95641: Out-of-bounds Write (CWE-787) in Adobe Photoshop

CVE-2026-95641 is an out-of-bounds write vulnerability in Adobe Photoshop Desktop. This flaw allows an attacker to write outside the intended memory bounds, potentially leading to arbitrary code execution within the context of the current user. Successful exploitation requires the victim to open a crafted malicious file, making user interaction necessary. The vulnerability affects Photoshop versions up to 27.10 and 26.11.7. The CVSS 3.1 score of 7.8 reflects high impact on confidentiality, integrity, and availability.

If exploited, this vulnerability could allow an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the affected system under that user context. The requirement for user interaction (opening a malicious file) limits the attack vector to social engineering or targeted delivery of malicious files.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources. Monitor Adobe's official security advisories for updates and apply patches promptly once available.