PatchTheCEVphotoshop vulnerabilities and fixes
Recent CVEs affecting photoshop, with upgrade or downgrade steps. 8 tracked.
photoshop has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2026-10-13. Highest priority: CVE-2026-95639 (score 33/100).
- CVE-2026-83661 HIGH 7.8 UPGRADE Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrar
- CVE-2026-95635 HIGH 7.8 UPGRADE Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in
- CVE-2026-95636 HIGH 7.8 UPGRADE Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrar
- CVE-2026-95637 HIGH 7.8 UPGRADE Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec
- CVE-2026-95638 HIGH 7.8 UPGRADE Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary cod
- CVE-2026-95639 HIGH 8.6 UPGRADE Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code
- CVE-2026-95640 MEDIUM 5.5 UPGRADE Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application
- CVE-2026-95641 HIGH 7.8 UPGRADE Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code exec
FAQ
How do I fix photoshop vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is photoshop being exploited right now?
None of the tracked photoshop CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which photoshop CVE should I patch first?
CVE-2026-95639 currently ranks highest (33/100): Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code .