Adobe Photoshop 2020 vulnerabilities

24 CVEs affecting Adobe Photoshop 2020, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-40709, published 2021-09-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-3783, published 2020-03-25. Critical severity, CVSS 9.8. EPSS: 4.9% chance of exploitation in the next 30 days. Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a heap corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2020-3775, published 2020-03-25. Critical severity, CVSS 9.8. EPSS: 4.9% chance of exploitation in the next 30 days. Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2021-40709, published 2021-09-27. High severity, CVSS 7.8. EPSS: 4.6% chance of exploitation in the next 30 days. Adobe Photoshop versions 21.2.11 (and earlier) and 22.5 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted SVG file. An unauthenticated attacker could…
CVE-2020-3780, published 2020-03-25. High severity, CVSS 8.8. EPSS: 4.5% chance of exploitation in the next 30 days. Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2020-3776, published 2020-03-25. High severity, CVSS 8.8. EPSS: 4.5% chance of exploitation in the next 30 days. Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2020-3774, published 2020-03-25. High severity, CVSS 8.8. EPSS: 4.5% chance of exploitation in the next 30 days. Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2020-3772, published 2020-03-25. High severity, CVSS 8.8. EPSS: 4.5% chance of exploitation in the next 30 days. Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2020-3770, published 2020-03-25. High severity, CVSS 8.8. EPSS: 4.5% chance of exploitation in the next 30 days. Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2020-3789, published 2020-03-25. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code…
CVE-2020-3788, published 2020-03-25. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code…

Latest

CVE-2021-21067, published 2021-03-12. High severity, CVSS 7.8. EPSS: 3% chance of exploitation in the next 30 days. Adobe Photoshop versions 21.2.5 (and earlier) and 22.2 (and earlier) are affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this…
CVE-2020-3791, published 2020-03-25. Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days. Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information…
CVE-2020-3790, published 2020-03-25. High severity, CVSS 8.8. EPSS: 3.7% chance of exploitation in the next 30 days. Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code…
CVE-2020-3787, published 2020-03-25. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code…
CVE-2020-3786, published 2020-03-25. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code…
CVE-2020-3785, published 2020-03-25. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code…
CVE-2020-3784, published 2020-03-25. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code…