{"id":"CVE-2021-42735","aliases":["EUVD-2021-29695","GHSA-ff73-9vgm-hwwj"],"status":"published","title":"Adobe Photoshop Memory Corruption could lead to Arbitrary code execution","description":"Adobe Photoshop version 22.5.1 (and earlier versions ) is affected by an Access of Memory Location After End of Buffer vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.02232,"percentile":0.82914,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-788"],"published":"2022-06-15T19:45:25Z","modified":"2026-06-17T04:10:02Z","products":[{"vendor":"adobe","product":"photoshop"}],"references":[{"url":"https://helpx.adobe.com/security/products/photoshop/apsb21-109.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-42735"},{"url":"https://github.com/advisories/GHSA-ff73-9vgm-hwwj"}],"sources":{"cve":[{"id":"CVE-2021-42735","title":"Adobe Photoshop Memory Corruption could lead to Arbitrary code execution","description":"Adobe Photoshop version 22.5.1 (and earlier versions ) is affected by an Access of Memory Location After End of Buffer vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.","status":"published","published":"2022-06-15T19:45:25.915Z","modified":"2025-04-23T18:12:28.551Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-788"],"updated_at":"2026-11-02T14:32:58.739039Z"}],"euvd":[{"id":"EUVD-2021-29695","description":"Adobe Photoshop version 22.5.1 (and earlier versions ) is affected by an Access of Memory Location After End of Buffer vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.","status":"published","published":"2022-06-15T19:45:25Z","modified":"2025-04-23T18:12:28Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:09.387599Z"}],"ghsa":[{"id":"GHSA-ff73-9vgm-hwwj","title":"Adobe Photoshop version 22.5.1 (and earlier versions ) is affected by an Access of Memory...","description":"Adobe Photoshop version 22.5.1 (and earlier versions ) is affected by an Access of Memory Location After End of Buffer vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.","status":"published","published":"2022-06-16T00:00:20Z","modified":"2023-01-27T05:04:24Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-788"],"updated_at":"2026-11-02T14:42:27.292422Z"}],"nvd":[{"id":"CVE-2021-42735","description":"Adobe Photoshop version 22.5.1 (and earlier versions ) is affected by an Access of Memory Location After End of Buffer vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.","status":"published","published":"2022-06-15T20:15:17.38Z","modified":"2026-06-17T04:10:02.417Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-788"],"updated_at":"2026-11-02T14:07:06.501652Z"}]}}