CVE-2025-61819: 
Adobe Photoshop vulnerability analysis and mitigation

Adobe Photoshop Desktop versions 26.8.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability identified as CVE-2025-61819. The vulnerability was disclosed on November 11, 2025, affecting both Windows and macOS operating systems (NVD, Adobe Advisory).

The vulnerability is classified as a Heap-based Buffer Overflow (CWE-122) and Out-of-bounds Write (CWE-787). It has received a CVSS v3.1 Base Score of 7.8 (HIGH) with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (NVD).

Successful exploitation of this vulnerability could result in arbitrary code execution in the context of the current user. This means an attacker could potentially execute malicious code with the same privileges as the user running Photoshop (NVD).

Exploitation of this vulnerability requires user interaction, specifically requiring a victim to open a malicious file. The attack complexity is considered low, requiring no privileges but does need local access (NVD).

Adobe has released version 26.9 of Photoshop Desktop as a security update to address this vulnerability. Users are advised to update to this latest version to mitigate the risk (Rapid7).