CVE-2026-96523: Out-of-bounds Write (CWE-787) in Adobe Photoshop

CVE-2026-96523 is an out-of-bounds write vulnerability in Adobe Photoshop Desktop that can lead to arbitrary code execution in the context of the current user. Successful exploitation requires a victim to open a specially crafted malicious file, enabling an attacker to execute code with user-level privileges. The vulnerability affects versions up to and including 27.10 and 26.11.7. No known exploits are reported in the wild. The CVSS v3.1 score is 7.8, reflecting high impact on confidentiality, integrity, and availability.

If exploited, this vulnerability allows an attacker to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the user's environment. The attack requires user interaction (opening a malicious file), limiting the attack vector to targeted or social engineering scenarios. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid opening files from untrusted or unknown sources to mitigate risk.