AI analysis
Adobe Photoshop Desktop is affected by an integer overflow or wraparound (CWE-190) that can lead to arbitrary code execution in the context of the current user. An attacker must convince a victim to open a malicious file; the issue is local, requires user interaction, and needs no prior privileges. Successful exploitation could give the attacker the same access as the logged-in user, including reading or changing files and running programs. Photoshop Desktop users who open untrusted documents are the population at risk; the advisory data does not name specific version ranges. It is not listed in CISA's Known Exploited Vulnerabilities catalog, and no public proof-of-concept is known.
What to do: Install Adobe's security update for Photoshop Desktop as soon as it is available through the Creative Cloud app or Adobe's security bulletin, and confirm the installed build is no longer listed as affected. Until then, do not open Photoshop files from untrusted sources, and treat unexpected PSD or related documents as untrusted.
Estimated exposure
massMillions of desktop installations (order of magnitude; exact affected builds unknown) — Adobe Photoshop is a flagship Creative Cloud desktop app with a widely reported multi-million subscriber and install base; no exact affected-version install count is in the CVE data, so this is an order-of-magnitude estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.