CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 09:00 UTC )
What this means for you
This week: 5,435 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,435 Show in the list Critical, last 7 days 355 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product adobe:photoshop . Show all products
28 CVEs, showing 1 to 28
CVE Severity Title Published CVE-2025-61819 High 7.8 Photoshop Desktop versions 26.8.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Nov 11, 2025 CVE-2026-27289 High 7.8 Photoshop Desktop versions 27.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. Apr 14, 2026 CVE-2026-75863 High 7.8 Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) Assigned by adobe
Sep 8, 2026 CVE-2026-82006 High 7.8 Photoshop Desktop | Heap-based Buffer Overflow (CWE-122) Assigned by adobe
Sep 8, 2026 CVE-2026-82007 High 7.8 Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) Assigned by adobe
Sep 8, 2026 CVE-2026-82005 High 7.8 Photoshop Desktop | Out-of-bounds Write (CWE-787) Assigned by adobe
Sep 8, 2026 CVE-2026-76199 High 8.6 Photoshop Desktop | Uncontrolled Search Path Element (CWE-427) Assigned by adobe
Sep 8, 2026 CVE-2026-75862 High 7.8 Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) Assigned by adobe
Sep 8, 2026 CVE-2026-75631 High 7.8 Photoshop Desktop | Out-of-bounds Write (CWE-787) Assigned by adobe
Sep 8, 2026 CVE-2026-75771 High 7.8 Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) Assigned by adobe
Sep 8, 2026 CVE-2026-95641 High 7.8 Photoshop Desktop | Out-of-bounds Write (CWE-787) Assigned by adobe
Oct 13, 2026 CVE-2026-105896 Medium 5.5 Photoshop Desktop | NULL Pointer Dereference (CWE-476) Assigned by adobe
Oct 13, 2026 CVE-2026-95640 Medium 5.5 Photoshop Desktop | NULL Pointer Dereference (CWE-476) Assigned by adobe
Oct 13, 2026 CVE-2026-100112 High 7.8 Photoshop Desktop | Out-of-bounds Write (CWE-787) Assigned by adobe
Oct 13, 2026 CVE-2026-104348 High 7.8 Photoshop Desktop | Heap-based Buffer Overflow (CWE-122) Assigned by adobe
Oct 13, 2026 CVE-2026-95636 High 7.8 Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) Assigned by adobe
Oct 13, 2026 CVE-2026-104347 High 7.8 Photoshop Desktop | Out-of-bounds Write (CWE-787) Assigned by adobe
Oct 13, 2026 CVE-2026-100111 High 7.8 Photoshop Desktop | Out-of-bounds Write (CWE-787) Assigned by adobe
Oct 13, 2026 CVE-2026-95639 High 8.6 Photoshop Desktop | Incorrect Authorization (CWE-863) Assigned by adobe
Oct 13, 2026 CVE-2026-97312 High 7.8 Photoshop Desktop | Out-of-bounds Write (CWE-787) Assigned by adobe
Oct 13, 2026 CVE-2026-95637 High 7.8 Photoshop Desktop | Out-of-bounds Write (CWE-787) Assigned by adobe
Oct 13, 2026 CVE-2026-104346 High 7.8 Photoshop Desktop | Out-of-bounds Write (CWE-787) Assigned by adobe
Oct 13, 2026 CVE-2026-96523 High 7.8 Photoshop Desktop | Out-of-bounds Write (CWE-787) Assigned by adobe
Oct 13, 2026 CVE-2026-95638 High 7.8 Photoshop Desktop | Heap-based Buffer Overflow (CWE-122) Assigned by adobe
Oct 13, 2026 CVE-2026-95635 High 7.8 Photoshop Desktop | Double Free (CWE-415) Assigned by adobe
Oct 13, 2026 CVE-2026-83661 High 7.8 Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) Assigned by adobe
Oct 13, 2026 CVE-2026-96522 High 7.8 Photoshop Desktop | Out-of-bounds Write (CWE-787) Assigned by adobe
Oct 13, 2026 CVE-2026-96521 High 7.8 Photoshop Desktop | Out-of-bounds Write (CWE-787) Assigned by adobe
Oct 13, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.