Findings

CVE-2026-95640

Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service.

Published Oct 13, 2026 · updated Oct 14, 2026 · Adobe Photoshop

Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 13, 2026 · Catalog

    Detected

    Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  2. Oct 14, 2026 · NIST NVD

    Updated

    Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected

  • vendor Adobe Photoshopversion unspecified

Sources

  • Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires us

    vulnerability.circl.lu
  • CVE.orgCVE-2026-95640

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2026-95640

    30-day exploitation probability 0.2%

    first.org
  • NIST NVDCVE-2026-95640

    Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires us

    nvd.nist.gov

References

CVE-2026-95640 · ZeroDay Findings