CVE-2026-48397: falha de alta gravidade em Adobe Lightroom Classic
Lightroom Classic | Deserialization of Untrusted Data (CWE-502)
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.6epss 1.0%
Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Produtos afetados
Adobe · Lightroom ClassicCVEs relacionadas — Adobe Lightroom Classic
No mesmo produto, das mais perigosas para as menos.
CVE-2021-40776MEDIUMAdobe Lightroom Classic DLL Hijacking Local Privilege Escalation VulnerabilityEPSS 0.5%CVE-2026-47940HIGHLightroom Classic | Integer Overflow or Wraparound (CWE-190)EPSS 0.3%CVE-2026-48441HIGHLightroom Classic | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 0.3%CVE-2026-48408HIGHLightroom Classic | Out-of-bounds Write (CWE-787)EPSS 0.3%CVE-2026-48409HIGHLightroom Classic | Out-of-bounds Write (CWE-787)EPSS 0.3%CVE-2026-48406HIGHLightroom Classic | Out-of-bounds Write (CWE-787)EPSS 0.3%