CVE-2026-48405

HighCVSS 7.8/10Last modified Oct 23, 2026

Description

Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Aug 11, 2026
Last modified
Oct 23, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-484067.8Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cuCVE-2026-484077.8Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cuCVE-2026-484087.8Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cuCVE-2026-484097.8Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cuCVE-2026-48417.3A weakness has been identified in code-projects Online Food Ordering System 1.0. This affects an unknown part of the file form/cart.php of tCVE-2026-484107.8Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cuCVE-2026-484114.9Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with highCVE-2026-484127.2Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker with high privCVE-2026-484138.7Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject CVE-2026-484148.7Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject CVE-2026-484158.3Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attaCVE-2026-484167.5Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could lev
CVE-2026-48405: High severity, CVSS 7.8 | Vulnix