PatchTheCEVlightroom vulnerabilities and fixes
Recent CVEs affecting lightroom, with upgrade or downgrade steps. 11 tracked.
lightroom has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 11. Most recent: 2026-08-11. Highest priority: CVE-2026-48397 (score 46/100).
- CVE-2026-48397 HIGH 8.6 UPGRADE Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitr
- CVE-2026-48441 HIGH 8.6 UPGRADE Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Travers
- CVE-2026-47940 HIGH 7.8 UPGRADE Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrar
- CVE-2026-48404 HIGH 7.8 UPGRADE Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec
- CVE-2026-48405 HIGH 7.8 UPGRADE Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec
- CVE-2026-48406 HIGH 7.8 UPGRADE Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec
- CVE-2026-48407 HIGH 7.8 UPGRADE Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec
- CVE-2026-48408 HIGH 7.8 UPGRADE Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec
- CVE-2026-48409 HIGH 7.8 UPGRADE Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec
- CVE-2026-48410 HIGH 7.8 UPGRADE Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec
- CVE-2026-48447 HIGH 7.7 UPGRADE Lightroom Classic is affected by an Incorrect Authorization vulnerability that could result in arbitrary code
FAQ
How do I fix lightroom vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lightroom being exploited right now?
None of the tracked lightroom CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lightroom CVE should I patch first?
CVE-2026-48397 currently ranks highest (46/100): Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitr.