Adobe Security Bulletin
Last updated on Oct 13, 2026
Security update available for Adobe Photoshop | APSB26-158
Summary
Adobe has released a priority 3 security update for Adobe Photoshop. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution and application denial-of-service.
Adobe is not aware of any exploits in the wild for any of the issues addressed in this update.
Affected Versions
Solution
Adobe categorizes this update with the following priority rating and recommends users update their installation to the newest version via the Creative Cloud desktop app's update mechanism. For more information, please reference this help page.
For managed environments, IT administrators can use the Admin Console to deploy Creative Cloud applications to end users. Refer to this help page for more information.
Vulnerability Details
Acknowledgments
Adobe would like to thank the following researchers for reporting the relevant issues and for working with Adobe to help protect our customers:
- Kieran (kaiksi) — CVE-2026-95639
- yjdfy — CVE-2026-100112, CVE-2026-100111, CVE-2026-97312, CVE-2026-96523, CVE-2026-96522, CVE-2026-96521, CVE-2026-95641
- Brandon Evans of TrendAI Zero Day Initiative — CVE-2026-83661, CVE-2026-95636
- Jony (jony_juice) — CVE-2026-95638, CVE-2026-95635, CVE-2026-95637, CVE-2026-104348, CVE-2026-104347, CVE-2026-104346, CVE-2026-105896
- ping (everping) — CVE-2026-95640
NOTE: Adobe maintains a public bug bounty program through Intigriti. If you’re an external security researcher interested in identifying and responsibly reporting potential security vulnerabilities to Adobe, please visit the Adobe Bug Bounty Program for more information.
For more information, visit Adobe Security Bulletin and Advisories or email PSIRT@adobe.com.
