CVE-2020-9724

CVE-2020-9724 affects Adobe Lightroom Classic (Windows/macOS) 9.2.0.10 and earlier due to an insecure library loading vulnerability. The root cause is insecure loading of a library, enabling privilege escalation within the current user context. Adobe’s advisory APSB20-51 recommends updating Light...

CVE-2021-43753

CVE-2021-43753 affects Adobe Lightroom versions 4.4 and earlier, due to a use-after-free in parsing TIF files that could lead to privilege escalation. Exploitation requires user interaction (opening a malicious file). Mitigation in the provided documents: Adobe released Lightroom security updates...

CVE-2024-20754

Adobe Lightroom Desktop

CVE-2025-27197

CVE-2025-27197 affects Adobe Lightroom Desktop: versions 8.2 and earlier are vulnerable to an out-of-bounds write that can allow arbitrary code execution under the current user. Exploitation requires user interaction—victim must open a malicious file. Affected product/component: Lightroom Desktop...

CVE-2021-40776

CVE-2021-40776 affects Adobe Lightroom Classic 10.3 and earlier. The vulnerability is a local privilege escalation in the Offline Lightroom Classic installer, exploitable by an authenticated user with high privileges after user interaction is triggered before product installation. Affected platfo...

CVE-2024-45145

Adobe Lightroom Desktop vulnerable to an out-of-bounds read (CWE-125) in versions 7.4.1, 13.5, 12.5.1 and earlier, with the issue allowing disclosure of sensitive memory and potential bypass of ASLR. Exploitation requires user interaction (victim opens a malicious file). The security context and ...

CVE-2020-24447

CVE-2020-24447 affects Adobe Lightroom Classic for Windows (10.0 and earlier). The issue is an uncontrolled search path element in Lightroom Classic that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious...

CVE-2026-47940

CVE-2026-47940 affects Lightroom Classic. The issue is an Integer Overflow/Wraparound in a component used by Lightroom Classic that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The CVSS 3.1 sc...

CVE-2026-48441

CVE-2026-48441 affects Lightroom Classic. The issue is an Improper Limitation of a Pathname to a Restricted Directory (path traversal) that could allow arbitrary file system reads. The root cause is a pathname handling flaw that improperly constrains access to restricted directories. Victims must...

CVE-2026-48397

CVE-2026-48397 affects Lightroom Classic and involves a Deserialization of Untrusted Data vulnerability that could enable arbitrary code execution in the context of the current user. The underlying issue is triggered when a user opens a malicious file, requiring user interaction. The attack surfa...

CVE-2026-21349

Lightroom Desktop vulnerable to an out-of-bounds write (CWE-787) in version 15.1 and earlier, enabling arbitrary code execution in the current user context after opening a malicious file. Affected products/versions are consistently stated across CVE sources (NVD/Red Hat). Root cause is an out-of-...

CVE-2026-48408

Lightroom Classic is affected by an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the current user context. Exploitation requires user interaction: the victim must open a malicious file. The vulnerability is described consistently across CVE records as an out-of-bound...

CVE-2026-48409

Lightroom Classic is affected by an out-of-bounds write (CWE-787) that could lead to arbitrary code execution in the current user’s context. Exploitation requires user interaction: the victim must open a malicious file. The vulnerability has a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack v...

CVE-2026-48404

Lightroom Classic is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. The CVSSv3.1 score is 7.8 (High) with Local attack vector,...

CVE-2026-48406

CVE-2026-48406 affects Lightroom Classic with an out-of-bounds write (CWE-787) that could lead to arbitrary code execution in the current user context. Exploitation requires user interaction : the victim must open a malicious file. The CVSSv3.1 base metrics indicate a High impact with local acces...

CVE-2026-48447

CVE-2026-48447 involves Adobe Lightroom Classic, where an Incorrect Authorization (CWE-863) vulnerability could enable arbitrary code execution in the context of the current user. The issue requires the victim to open a malicious file, with exploitation contingent on conditions beyond the attacke...

CVE-2026-48405

CVE-2026-48405 affects Lightroom Classic with an out-of-bounds write (CWE-787) that could enable arbitrary code execution in the current user context. In all sources, exploitation requires user interaction: a victim must open a malicious file. Affected product/component appears consistently as Li...

CVE-2026-48407

Lightroom Classic is affected by an out-of-bounds write (CWE-787) that could enable arbitrary code execution in the current user context. Exploitation requires the user to open a malicious file, per the CVE description. The CVSS vector indicates a local attack with low attack complexity and user ...

CVE-2026-48410

CVE-2026-48410 : Lightroom Classic is affected by an out-of-bounds write (CWE-787) that could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. The description does not specify affected versions or pa...