Adobe has released updates for Windows and macOS for CRITICAL severity vulnerabilities in Photoshop.

Photoshop Vulnerability

Multiple vulnerabilities were found in Adobe Photoshop. Security updates were released for the below vulnerabilities:

CVE-2021-28548, CVE-2021-28549 — Buffer Overflow

Adobe Photoshop are affected by a Buffer Overflow vulnerability when parsing a specially crafted JSX file.

Furthermore, these vulnerabilities can be exploited by an unauthenticated local attacker by persuading a victim to open a specially crafted document. 

However,  Successful exploitation could lead to arbitrary code execution in the context of the current user.

Affected Versions

Security Recommendation

However, Adobe recommended users to update to newest version via the Creative Cloud desktop app’s update mechanism.

Reference URL

https://helpx.adobe.com/security/products/photoshop/apsb21-28.html