CVE-2019-7094

—

CVSS 3.0

9.8 critical

EPSS

6%p93

Published

May 24, 2019 (May 24, 2019)

Modified

Jun 17, 2026

Description

Adobe Photoshop CC 19.1.7 and earlier, and 20.0.2 and earlier have a heap corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendors: adobe
Products: photoshop cc
Weakness: CWE-787
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (6.4%)

In the news2 stories

Adobe Releases Patches for Critical Flaws in Photoshop CC and Digital Edition

The Hacker NewsMar 12, 16:22 UTC · Mar 12, 2019Vulnerability in the wildCVE-2019-7094 CVE-2019-7095 CVE-2019-7816

Adobe Patch Tuesday updates address critical in Photoshop, Digital Editions

Security AffairsMar 12, 14:42 UTC · Mar 12, 2019Vulnerability CVE-2019-7095 CVE-2019-7094