Adobe Photoshop Cc vulnerabilities

77 CVEs affecting Adobe Photoshop Cc, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9687, published 2020-07-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-0953, published 2016-02-10. Critical severity, CVSS 9.8. EPSS: 19.6% chance of exploitation in the next 30 days. Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
CVE-2016-0952, published 2016-02-10. Critical severity, CVSS 9.8. EPSS: 19.6% chance of exploitation in the next 30 days. Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
CVE-2016-0951, published 2016-02-10. Critical severity, CVSS 9.8. EPSS: 19.6% chance of exploitation in the next 30 days. Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via…
CVE-2015-3111, published 2015-06-24. High severity, CVSS 10.0. EPSS: 19.5% chance of exploitation in the next 30 days. Heap-based buffer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-3110, published 2015-06-24. High severity, CVSS 10.0. EPSS: 16.5% chance of exploitation in the next 30 days. Integer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2015-3112, published 2015-06-24. High severity, CVSS 10.0. EPSS: 14.3% chance of exploitation in the next 30 days. Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2019-7989, published 2019-08-26. High severity, CVSS 8.8. EPSS: 14.2% chance of exploitation in the next 30 days. Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7993, published 2019-08-26. Critical severity, CVSS 9.8. EPSS: 8.3% chance of exploitation in the next 30 days. Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7990, published 2019-08-26. Critical severity, CVSS 9.8. EPSS: 8.3% chance of exploitation in the next 30 days. Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2019-7985, published 2019-08-26. High severity, CVSS 8.8. EPSS: 8.3% chance of exploitation in the next 30 days. Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

Latest

CVE-2020-9687, published 2020-07-22. High severity, CVSS 8.8. EPSS: 3.5% chance of exploitation in the next 30 days. Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2020-9686, published 2020-07-22. Medium severity, CVSS 6.5. EPSS: 4.2% chance of exploitation in the next 30 days. Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2020-9685, published 2020-07-22. High severity, CVSS 8.8. EPSS: 3.5% chance of exploitation in the next 30 days. Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2020-9684, published 2020-07-22. High severity, CVSS 8.8. EPSS: 3.5% chance of exploitation in the next 30 days. Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVE-2020-9683, published 2020-07-22. High severity, CVSS 8.8. EPSS: 4% chance of exploitation in the next 30 days. Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2020-3791, published 2020-03-25. Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days. Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information…
CVE-2020-3790, published 2020-03-25. High severity, CVSS 8.8. EPSS: 3.7% chance of exploitation in the next 30 days. Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code…
CVE-2020-3789, published 2020-03-25. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code…
CVE-2020-3788, published 2020-03-25. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code…
CVE-2020-3787, published 2020-03-25. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code…