# CVE-2026-82005: Adobe Photoshop Desktop out-of-bounds write in file parsing

Source: https://junglewise.ai/threats/cve-2026-82005-adobe-photoshop-desktop-out-of-bounds-write-in-file-parsing  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-08. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-82005 · Severity: high · CVSS 7.8 · Published 2026-09-08

Adobe Photoshop Desktop contains an out-of-bounds write vulnerability that allows attackers to execute arbitrary code with the privileges of the logged-in user. An attacker must trick a user into opening a malicious file to trigger the vulnerability. Successful exploitation could allow unauthorized access to user data, modification of files, or lateral movement within corporate networks.

Technologies: [Adobe Photoshop Desktop](https://junglewise.ai/threats/technologies/photoshop-desktop). Vendors: [Adobe](https://junglewise.ai/threats/vendors/adobe).

## Quick answers

**Is CVE-2026-82005 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-82005 being exploited in the wild.

**How severe is CVE-2026-82005?** High severity, with a CVSS score of 7.8, published 8 September 2026.

**Which products and versions are affected?** Adobe Photoshop Desktop.

**Is there a fix for CVE-2026-82005?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-82005 attacked?** It is attacked with local access.

**Am I affected by CVE-2026-82005?** Check whether you run Adobe Photoshop Desktop. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is an out-of-bounds write flaw in Photoshop Desktop's file parsing logic. The issue occurs when processing specially crafted malicious files, causing memory to be written beyond intended boundaries. Exploitation requires user interaction—specifically, a victim must open a malicious file in Photoshop. A successful exploit allows arbitrary code execution in the context of the current user, potentially providing access to all user data and system resources the user has permission to access. A patch is expected to be available through Adobe's security bulletin APSB26-130.

## Affected products

- Adobe Photoshop Desktop

## Timeline

- 2026-09-08: disclosed

## References

- [https://helpx.adobe.com/security/products/photoshop/apsb26-130.html](https://helpx.adobe.com/security/products/photoshop/apsb26-130.html)

## Related threats

- [Adobe Photoshop Desktop integer overflow vulnerability](https://junglewise.ai/threats/cve-2026-82007-adobe-photoshop-desktop-integer-overflow-vulnerability)
- [Adobe Photoshop Desktop heap buffer overflow](https://junglewise.ai/threats/cve-2026-82006-adobe-photoshop-desktop-heap-buffer-overflow)
- [Adobe Photoshop Desktop uncontrolled search path element vulnerability](https://junglewise.ai/threats/cve-2026-76199-adobe-photoshop-desktop-uncontrolled-search-path-element)
- [Adobe Photoshop Desktop integer overflow vulnerability](https://junglewise.ai/threats/cve-2026-75863-adobe-photoshop-desktop-integer-overflow-vulnerability)
- [Adobe Photoshop Desktop integer overflow](https://junglewise.ai/threats/cve-2026-75862-adobe-photoshop-desktop-integer-overflow)