Adobe Photoshop CS6 vulnerabilities

2 CVEs affecting Adobe Photoshop CS6, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-0275, published 2012-09-04.

More from Adobe.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-4170, published 2012-08-31. High severity, CVSS 9.3. EPSS: 11% chance of exploitation in the next 30 days. Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted file.
• CVE-2012-0275, published 2012-09-04. High severity, CVSS 10.0. EPSS: 9% chance of exploitation in the next 30 days. Heap-based buffer overflow in Photoshop.exe in Adobe Photoshop CS5 12.x before 12.0.5, CS5.1 12.1.x before 12.1.1, and CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a…