CVE-2026-48397: Lightroom: güvenilmeyen verinin serileştirmeden çıkarılması

Açıklama (NVD)

Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Özet bilgiler

Ürün

Adobe Lightroom

CVSS v3.1

8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS

%0,97 (yüzdelik 62)

CWE

CWE-502

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• helpx.adobe.com
• CWE-502