CVE-2026-113578

MediumCVSS 5.5/10Last modified Nov 10, 2026

Description

Photoshop Desktop is affected by an Uncontrolled Recursion vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 10, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1135799.9Adobe Experience Manager is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbiCVE-2026-113584.4The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin for WordPress is vulnerable to Stored CrosCVE-2026-1135809.9Adobe Experience Manager is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbiCVE-2026-1135827.5UNSUPPORTED WHEN ASSIGNED Improper restriction of XML external entity references in Apache Abdera allows an attacker to access sensitive datCVE-2026-1135836.1Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allows remote attackers to execute arbitraryCVE-2026-1135849.8The placester WordPress plugin through 1.4.3 does not perform any capability, nonce or ownership check on an AJAX action that updates accounCVE-2026-113594.3The Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration plugin for WordPress is vulnerable to unauthorized pCVE-2026-1135933.1An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19. The `django.middleware.cache.UpdateCacheMiddleCVE-2026-1135945.4Sharkord before 0.0.8 contains a missing authorization vulnerability that allows any authenticated member to change server-wide settings by CVE-2026-1135954.3Sharkord before 0.0.26 contains a missing authorization vulnerability in the others.changeLogo tRPC mutation that allows any authenticated mCVE-2026-1135963.1Webstudio before 0.256.0 contains a missing authorization vulnerability that allows authenticated users to read other users' project data viCVE-2026-1135975.4Blinko through 1.8.8 contains an insecure direct object reference vulnerability in the tag tRPC router that allows authenticated users to re
CVE-2026-113578: Medium severity, CVSS 5.5 | Vulnix