CVE-2021-43753

CVE-2021-43753 affects Adobe Lightroom versions 4.4 and earlier, due to a use-after-free in parsing TIF files that could lead to privilege escalation. Exploitation requires user interaction (opening a malicious file). Mitigation in the provided documents: Adobe released Lightroom security updates...

CVE-2024-20754

Adobe Lightroom Desktop

CVE-2025-27197

CVE-2025-27197 affects Adobe Lightroom Desktop: versions 8.2 and earlier are vulnerable to an out-of-bounds write that can allow arbitrary code execution under the current user. Exploitation requires user interaction—victim must open a malicious file. Affected product/component: Lightroom Desktop...

CVE-2021-40776

CVE-2021-40776 affects Adobe Lightroom Classic 10.3 and earlier. The vulnerability is a local privilege escalation in the Offline Lightroom Classic installer, exploitable by an authenticated user with high privileges after user interaction is triggered before product installation. Affected platfo...

CVE-2024-45145

Adobe Lightroom Desktop vulnerable to an out-of-bounds read (CWE-125) in versions 7.4.1, 13.5, 12.5.1 and earlier, with the issue allowing disclosure of sensitive memory and potential bypass of ASLR. Exploitation requires user interaction (victim opens a malicious file). The security context and ...

CVE-2026-47940

CVE-2026-47940 affects Lightroom Classic. The issue is an Integer Overflow/Wraparound in a component used by Lightroom Classic that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The CVSS 3.1 sc...

CVE-2026-48397

CVE-2026-48397 affects Lightroom Classic and involves a Deserialization of Untrusted Data vulnerability that could enable arbitrary code execution in the context of the current user. The underlying issue is triggered when a user opens a malicious file, requiring user interaction. The attack surfa...

CVE-2026-21349

Lightroom Desktop vulnerable to an out-of-bounds write (CWE-787) in version 15.1 and earlier, enabling arbitrary code execution in the current user context after opening a malicious file. Affected products/versions are consistently stated across CVE sources (NVD/Red Hat). Root cause is an out-of-...

CVE-2026-48409

Lightroom Classic is affected by an out-of-bounds write (CWE-787) that could lead to arbitrary code execution in the current user’s context. Exploitation requires user interaction: the victim must open a malicious file. The vulnerability has a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack v...

CVE-2026-48441

CVE-2026-48441 affects Lightroom Classic. The issue is an Improper Limitation of a Pathname to a Restricted Directory (path traversal) that could allow arbitrary file system reads. The root cause is a pathname handling flaw that improperly constrains access to restricted directories. Victims must...

CVE-2026-48404

Lightroom Classic is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. The CVSSv3.1 score is 7.8 (High) with Local attack vector,...

CVE-2026-48405

CVE-2026-48405 affects Lightroom Classic with an out-of-bounds write (CWE-787) that could enable arbitrary code execution in the current user context. In all sources, exploitation requires user interaction: a victim must open a malicious file. Affected product/component appears consistently as Li...

CVE-2026-48406

CVE-2026-48406 affects Lightroom Classic with an out-of-bounds write (CWE-787) that could lead to arbitrary code execution in the current user context. Exploitation requires user interaction : the victim must open a malicious file. The CVSSv3.1 base metrics indicate a High impact with local acces...

CVE-2026-48408

Lightroom Classic is affected by an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the current user context. Exploitation requires user interaction: the victim must open a malicious file. The vulnerability is described consistently across CVE records as an out-of-bound...

CVE-2026-48447

CVE-2026-48447 involves Adobe Lightroom Classic, where an Incorrect Authorization (CWE-863) vulnerability could enable arbitrary code execution in the context of the current user. The issue requires the victim to open a malicious file, with exploitation contingent on conditions beyond the attacke...

CVE-2026-48407

Lightroom Classic is affected by an out-of-bounds write (CWE-787) that could enable arbitrary code execution in the current user context. Exploitation requires the user to open a malicious file, per the CVE description. The CVSS vector indicates a local attack with low attack complexity and user ...

CVE-2026-48410

CVE-2026-48410 : Lightroom Classic is affected by an out-of-bounds write (CWE-787) that could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. The description does not specify affected versions or pa...