AI analysis
Adobe Photoshop Desktop is affected by an integer overflow or wraparound (CWE-190) that can lead to arbitrary code execution in the context of the current user. The flaw is triggered only when a victim opens a malicious file, so it is a local, user-interaction attack rather than a remote unauthenticated one. A successful attacker gains high impact on confidentiality, integrity, and availability of that user's session (CVSS 3.1 base score 7.8). Anyone running an affected Photoshop Desktop build who opens untrusted files is at risk; specific version ranges were not included in the source data. It is not listed in CISA KEV and no public proof-of-concept is known.
What to do: Install the Adobe security update for Photoshop Desktop as soon as it is published for your release, and do not open image or project files from untrusted sources until you are patched. Until then, treat unexpected Photoshop files as untrusted and prefer opening them only in a restricted or non-production account.
Estimated exposure
massOn the order of millions of desktop installations (likely well above 1 million users) — Estimate based on Adobe Photoshop being a flagship Creative Cloud desktop application with a publicly reported subscriber base in the tens of millions; no install count is given in the CVE data.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.