NCSC-2026-0360 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Photoshop Desktop
Adobe heeft meerdere kwetsbaarheden verholpen in Adobe Photoshop Desktop. De kwetsbaarheden bevinden zich in de verwerking van speciaal vervaardigde bestanden binnen Adobe Photoshop Desktop. Deze omvatten out-of-bounds write, integer overflow of wraparound, uncontrolled search path element en heap-based buffer overflow. Door het openen van kwaadaardig opgemaakte bestanden kan een aanvaller code uitvoeren met de privileges van de gebruiker die de applicatie draait. De kwetsbaarheden kunnen leiden tot geheugenbeschadiging en het overschrijven van kritieke datastructuren, wat resulteert in de mogelijkheid tot ongeautoriseerde code-uitvoering binnen de context van de applicatie.
Details
Original advisory: https://advisories.ncsc.nl/advisory?id=NCSC-2026-0360
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-756310.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 8% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-757710.23% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 13% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-758620.23% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 13% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-758630.23% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 13% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-761990.21% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 11% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-820050.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 8% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-820060.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 16% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-820070.23% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 13% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-75631 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-75771 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-75862 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-75863 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-76199 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-82005 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-82006 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-82007 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- high[NEU] [hoch] Adobe Photoshop: Mehrere Schwachstellen ermöglichen Codeausführungcert-bund
- highCVE-2026-82007: Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could re…nvd
- highCVE-2026-82006: Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result …nvd
- highCVE-2026-82005: Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arb…nvd
- highCVE-2026-76199: Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could …nvd
- highCVE-2026-75863: Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could re…nvd
- highCVE-2026-75862: Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could re…nvd
- highCVE-2026-75771: Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could re…nvd
- highCVE-2026-75631: Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arb…nvd
Recent advisories for Kwetsbaarheden verholpen in
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- unknownNCSC-2026-0365 [1.00] [H/H] Kwetsbaarheden verholpen in Check Point VPN productenncsc-nl · 2026-09-10
- unknownNCSC-2026-0364 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Illustratorncsc-nl · 2026-09-09
- unknownNCSC-2026-0363 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Experience Managerncsc-nl · 2026-09-09
- unknownNCSC-2026-0362 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe ColdFusionncsc-nl · 2026-09-09
- unknownNCSC-2026-0361 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Commercencsc-nl · 2026-09-09
- unknownNCSC-2026-0358 [1.00] [M/H] Kwetsbaarheden verholpen in Ivanti Neurons for ITSMncsc-nl · 2026-09-09
More from NCSC-NL Advisories
- unknownNCSC-2026-0365 [1.00] [H/H] Kwetsbaarheden verholpen in Check Point VPN producten2026-09-10
- unknownNCSC-2026-0364 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Illustrator2026-09-09
- unknownNCSC-2026-0363 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Experience Manager2026-09-09
- unknownNCSC-2026-0362 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe ColdFusion2026-09-09
- unknownNCSC-2026-0361 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Commerce2026-09-09