Vulnerabilities

Adobe Photoshop DCM Pixel Data Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-95636.

Read at Zero Day Initiative published advisories

Vendor

Adobe

Product

Creative Cloud apps

CVSS

7.8

• Zero Day Initiative published advisories (zerodayinitiative.com)
• CVE-2026-95636 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 10
   CVE NVD 18d ago

   Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the…

   CVSS 7.8 CVE-2026-95636 Adobe
2. 10
   ZDI advisory ZDI 10 Sep 2026

   Adobe Photoshop DCM JPEG Image Parsing Integer Overflow Remote Code Execution Vulnerability

   CVSS 7.8 CVE-2026-75862 Adobe
3. 10
   ZDI advisory ZDI 10 Sep 2026

   Adobe Photoshop DCM File Parsing Integer Overflow Remote Code Execution Vulnerability

   CVSS 7.8 CVE-2026-75863 Adobe
4. 10
   ZDI advisory ZDI 10 Sep 2026

   Adobe Photoshop DCM JPEG-LS Image Parsing Integer Overflow Remote Code Execution Vulnerability

   CVSS 7.8 CVE-2026-75771 Adobe