Adobe Security Bulletin
Last updated on Nov 10, 2026
Security update available for Adobe Photoshop | APSB26-181
Summary
Adobe has released a priority 3 security update for Adobe Photoshop. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution, application denial-of-service, and memory exposure.
Adobe is not aware of any exploits in the wild for any of the issues addressed in this update.
Affected Versions
Solution
Adobe categorizes this update with the following priority rating and recommends users update their installation to the newest version via the Creative Cloud desktop app's update mechanism. For more information, please reference this help page.
For managed environments, IT administrators can use the Admin Console to deploy Creative Cloud applications to end users. Refer to this help page for more information.
Note
Photoshop 2025 will not receive a further update per the Creative Cloud Support Policy. Customers on Photoshop 2025 or Photoshop 2026 should update to Photoshop 2026 version 27.11.1 or Photoshop 2027 version 28.0.
Vulnerability Details
Acknowledgments
Adobe would like to thank the following researchers for reporting the relevant issues and for working with Adobe to help protect our customers:
- Francis provencher (prl) — CVE-2026-113575, CVE-2026-113578, CVE-2026-113571
- Jony (jony_juice) — CVE-2026-117547, CVE-2026-117546, CVE-2026-116480, CVE-2026-116003, CVE-2026-113569, CVE-2026-115345, CVE-2026-114373, CVE-2026-118200, CVE-2026-118199, CVE-2026-118198
NOTE: Adobe maintains a public bug bounty program through Intigriti. If you’re an external security researcher interested in identifying and responsibly reporting potential security vulnerabilities to Adobe, please visit the Adobe Bug Bounty Program for more information.
For more information, visit Adobe Security Bulletin and Advisories or email PSIRT@adobe.com.
