CVE-2020-3784

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability

published March 25, 2020

CVSS
—
EPSS
4%
Percentile
90.4
In the wild
Unconfirmed
What it is

⚠️ Watch out, Photoshop users! A memory corruption bug in Adobe Photoshop CC 2019 and 2020 could allow attackers a way in, potentially leading to arbitrary code execution! Think of it like a restaurant kitchen where a chef mistakenly follows a recipe that doesn't list all the ingredients — the dish might turn out completely different, and not in a good way! This vulnerability allows an attacker to serve up their own malicious code instead of what was intended. If exploited, this vulnerability could enable an attacker to take control of your system, potentially allowing them to run any commands they desire, steal sensitive information, or even disrupt your work. Yikes! The consequences could be anything from minor annoyances to complete chaos on your machine.

Put simply

Think of it like a restaurant kitchen where a chef mistakenly follows a recipe that doesn't list all the ingredients — the dish might turn out completely different, and not in a good way! This vulnerability allows an attacker to serve up their own malicious code instead of what was intended. The memory corruption vulnerability in Adobe Photoshop CC allows for arbitrary code execution, meaning the attacker can manipulate the program's memory space to execute their own code.

What to do

If exploited, this vulnerability could enable an attacker to take control of your system, potentially allowing them to run any commands they desire, steal sensitive information, or even disrupt your work. Yikes! The consequences could be anything from minor annoyances to complete chaos on your machine. To protect yourself, make sure to update to the latest version of Adobe Photoshop as soon as possible. Regularly check for software updates, and consider implementing additional security measures like antivirus software to monitor for any suspicious activity. You've got this! By staying vigilant and updating your software, you can keep your digital workspace secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03940 · 90.4th percentile
Published
2020-03-25T20:31Z
EPSS history
Timeline
  • 25 MAR 20:31Z
    Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability
    cvelistv5