CVE-2026-48397

HighCVSS 8.6/10Last modified Oct 23, 2026

Description

Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published: Aug 11, 2026
Last modified: Oct 23, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-483985.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu CVE-2026-483997.5Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Principles vulnerability that could result in a Security feature by CVE-2026-48408.8A security flaw has been discovered in Netcore Power 15AX up to 3.0.0.6938. Affected by this issue is the function setTools of the file /bin CVE-2026-484047.8Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu CVE-2026-484057.8Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu CVE-2026-484067.8Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu CVE-2026-484077.8Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu CVE-2026-484087.8Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu CVE-2026-484097.8Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu CVE-2026-48417.3A weakness has been identified in code-projects Online Food Ordering System 1.0. This affects an unknown part of the file form/cart.php of t CVE-2026-484107.8Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu CVE-2026-484114.9Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high