Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:lightroom_classic:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductLightroom Classic (71302d08-72a8-5c24-b5bf-cf08bd78ed43)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-47940 vulnerable 2026-09-16 04:34:00.520255 Lightroom Classic | Integer Overflow or Wraparound (CWE-190)
HIGH (7.8)
Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2026-08-11T17:45:40.957Z
Updated: 2026-08-27T22:34:04.859Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48406 vulnerable 2026-09-16 04:33:05.145689 Lightroom Classic | Out-of-bounds Write (CWE-787)
HIGH (7.8)
Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2026-08-11T17:45:45.288Z
Updated: 2026-08-27T22:33:55.850Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48441 vulnerable 2026-09-16 04:33:04.918055 Lightroom Classic | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
HIGH (8.6)
Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Published: 2026-08-11T17:45:46.787Z
Updated: 2026-08-27T22:34:11.318Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48407 vulnerable 2026-09-16 04:33:04.798992 Lightroom Classic | Out-of-bounds Write (CWE-787)
HIGH (7.8)
Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2026-08-11T17:45:43.119Z
Updated: 2026-08-27T22:34:11.672Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48397 vulnerable 2026-09-16 04:33:04.752521 Lightroom Classic | Deserialization of Untrusted Data (CWE-502)
HIGH (8.6)
Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Published: 2026-08-11T17:45:43.843Z
Updated: 2026-08-27T22:34:08.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48409 vulnerable 2026-09-16 04:33:04.592239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48405 vulnerable 2026-09-16 04:33:04.536351 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48404 vulnerable 2026-09-16 04:33:04.439863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48447 vulnerable 2026-09-16 04:33:04.302632 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48408 vulnerable 2026-09-16 04:33:04.142663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48410 vulnerable 2026-09-16 04:33:04.120736 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40776 vulnerable 2026-06-08 05:35:19.044104 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.