NULL Pointer Dereference in Adobe Photoshop Desktop

Publication date: 2026-10-13

Last updated on: 2026-10-16

Assigner: Adobe Systems Incorporated

Description

Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-105896

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	photoshop	to 26.11.8 (exc)
adobe	photoshop	From 27.0 (inc) to 27.11 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This is a NULL Pointer Dereference vulnerability in Photoshop Desktop. It allows an attacker to crash the application by exploiting a flaw that causes a NULL pointer to be dereferenced, leading to a denial-of-service condition. The attacker must trick a user into opening a specially crafted malicious file to trigger this issue.

Impact Analysis

If exploited, this vulnerability can cause Photoshop Desktop to crash, disrupting your work and potentially leading to data loss if unsaved changes are lost. Since exploitation requires user interaction, you are only at risk if you open a malicious file sent by an attacker.

Mitigation Strategies

Update Adobe Photoshop to the latest version to patch the NULL Pointer Dereference vulnerability. Avoid opening untrusted files or files from unknown sources to prevent exploitation.

Hi! I’m here to help you understand CVE-2026-105896. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70