CVE-2012-2027: Adobe Photoshop

High severity, CVSS 9.3. EPSS: 13.3% chance of exploitation in the next 30 days.

Use-after-free vulnerability in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a crafted TIFF (aka .TIF) file.

Affected products

  • Adobe Photoshop: any version; version 2.5 only; version 3.0 only; version 4.0 only; version 5.0 only; version 6.0 only; …
  • Adobe Photoshop CS4: version 11.0 only
  • Adobe Photoshop CS5.5: up to and including 12.0

Published 2012-05-09. Last modified 2026-06-16.