PATCHBAY / PUBLICThreat News
Appearance
Color mode

Stronger text, borders, and focus indicators. Works with either color mode.

Online

THE LATEST / SECURITY & VULNERABILITIES

Threat News

Recent vulnerabilities and security advisories, straight from the source.

Every cached source, newest first. All entries link to the original publisher.

For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.

16,973 stories · Past 30 days · Newest first

Subscribe to this view · RSS
Source updates

Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.

  1. CVE-2026-96523 — Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the c…

    High · CVSS 3.1 7.8 · Assessor: [email protected]

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    CVE-2026-96523
    Read original (opens in a new tab)
  2. CVE-2026-96522 — Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the c…

    High · CVSS 3.1 7.8 · Assessor: [email protected]

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    CVE-2026-96522
    Read original (opens in a new tab)
  3. CVE-2026-96521 — Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the c…

    High · CVSS 3.1 7.8 · Assessor: [email protected]

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    CVE-2026-96521
    Read original (opens in a new tab)
  4. CVE-2026-95641 — Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the c…

    High · CVSS 3.1 7.8 · Assessor: [email protected]

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    CVE-2026-95641
    Read original (opens in a new tab)
  5. CVE-2026-95640 — Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-serv…

    Medium · CVSS 3.1 5.5 · Assessor: [email protected]

    Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    CVE-2026-95640
    Read original (opens in a new tab)
  6. CVE-2026-95639 — Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in t…

    High · CVSS 3.1 8.6 · Assessor: [email protected]

    Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

    CVE-2026-95639
    Read original (opens in a new tab)
  7. CVE-2026-95638 — Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in…

    High · CVSS 3.1 7.8 · Assessor: [email protected]

    Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    CVE-2026-95638
    Read original (opens in a new tab)
  8. CVE-2026-95637 — Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the c…

    High · CVSS 3.1 7.8 · Assessor: [email protected]

    Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    CVE-2026-95637
    Read original (opens in a new tab)
  9. CVE-2026-95636 — Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code executi…

    High · CVSS 3.1 7.8 · Assessor: [email protected]

    Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    CVE-2026-95636
    Read original (opens in a new tab)
  10. CVE-2026-95635 — Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of…

    High · CVSS 3.1 7.8 · Assessor: [email protected]

    Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    CVE-2026-95635
    Read original (opens in a new tab)
  11. CVE-2026-90530 — ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilit…

    Critical · CVSS 3.1 9.3 · Assessor: [email protected]

    ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed. RDS is purely a development feature meant for debugging purposes, and switching ColdFusion to Production Secure Profile automatically disables R…

    CVE-2026-90530
    Read original (opens in a new tab)

Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.