Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution.

The version of Adobe Photoshop CC or Photoshop installed on the remote Windows host is prior to 20.0.9/21.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-14 advisory.

  - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a     memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
    (CVE-2020-3784, CVE-2020-3785, CVE-2020-3786, CVE-2020-3787, CVE-2020-3788, CVE-2020-3789, CVE-2020-3790)

  - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a     heap corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
    (CVE-2020-3783)

  - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an     out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
    (CVE-2020-3771, CVE-2020-3777, CVE-2020-3781, CVE-2020-3782, CVE-2020-3791)

  - Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds read vulnerability.
    Successful exploitation could lead to information disclosure. (CVE-2020-3778)

  - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an     out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
    (CVE-2020-3773, CVE-2020-3779)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Photoshop CC or Photoshop installed on the remote macOS or Mac OS X host is prior to 20.0.9/21.1.1.
It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-14 advisory.

  - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a     memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
    (CVE-2020-3784, CVE-2020-3785, CVE-2020-3786, CVE-2020-3787, CVE-2020-3788, CVE-2020-3789, CVE-2020-3790)

  - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a     heap corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
    (CVE-2020-3783)

  - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an     out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
    (CVE-2020-3771, CVE-2020-3777, CVE-2020-3781, CVE-2020-3782, CVE-2020-3791)

  - Adobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds read vulnerability.
    Successful exploitation could lead to information disclosure. (CVE-2020-3778)

  - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an     out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
    (CVE-2020-3773, CVE-2020-3779)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
134764	Adobe Photoshop CC 20.x < 20.0.9 / 21.x < 21.1.1 Multiple Vulnerabilities (APSB20-14)	Nessus	Windows	Local	critical
134763	Adobe Photoshop CC 20.x < 20.0.9 / 21.x < 21.1.1 Multiple Vulnerabilities (macOS APSB20-14)	Nessus	MacOS X Local Security Checks	Local	critical

Detections

Analytics

CVE-2020-3776

high

Tenable Plugins

critical

critical