CVE-2026-97312: Out-of-bounds Write (CWE-787) in Adobe Photoshop

CVE-2026-97312 is an out-of-bounds write vulnerability in Adobe Photoshop Desktop that can lead to arbitrary code execution in the context of the current user. Successful exploitation requires a victim to open a crafted malicious file, which triggers the vulnerability. The flaw affects Photoshop versions up to 27.10 and 26.11.7 inclusive. The CVSS 3.1 vector indicates the attack requires local access with low complexity, no privileges, user interaction, and results in high impact on confidentiality, integrity, and availability.

If exploited, an attacker could execute arbitrary code with the same privileges as the current user, potentially leading to full compromise of the user's environment. The requirement for user interaction (opening a malicious file) limits the attack vector to social engineering or delivery of malicious files. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid opening files from untrusted sources and apply standard security best practices to limit exposure.