Adobe Photoshop CS5.5 vulnerabilities

3 CVEs affecting Adobe Photoshop CS5.5, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-0275, published 2012-09-04.

More from Adobe.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-2027, published 2012-05-09. High severity, CVSS 9.3. EPSS: 13.3% chance of exploitation in the next 30 days. Use-after-free vulnerability in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a crafted TIFF (aka .TIF) file.
• CVE-2012-0275, published 2012-09-04. High severity, CVSS 10.0. EPSS: 9% chance of exploitation in the next 30 days. Heap-based buffer overflow in Photoshop.exe in Adobe Photoshop CS5 12.x before 12.0.5, CS5.1 12.1.x before 12.1.1, and CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a…
• CVE-2012-2028, published 2012-05-09. High severity, CVSS 9.3. EPSS: 7% chance of exploitation in the next 30 days. Buffer overflow in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via unspecified vectors.