Adobe Photoshop Elements — known CVE vulnerabilities

Every CVE whose affected-product data names Adobe Photoshop Elements, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2007-2365 — CVSS 9.3 (critical): Buffer overflow in Adobe Photoshop CS2 and CS3, Photoshop Elements 5.0, Illustrator CS3, and GoLive 9 allows user-assisted remote attackers…
• CVE-2011-2443 — CVSS 9.3 (critical): Multiple buffer overflows in Adobe Photoshop Elements 8.0 and earlier allow remote attackers to cause a denial of service (memory…
• CVE-2009-3489 — CVSS 7.8 (high): Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local…
• CVE-2021-39825 — CVSS 7.8 (high): Photoshop Elements versions 2021 build 19.0 (20210304.m.156367) (and earlier) are affected by an out-of-bounds write vulnerability that…
• CVE-2021-28597 — CVSS 5.5 (medium): Adobe Photoshop Elements version 5.2 (and earlier) is affected by an insecure temporary file creation vulnerability. An unauthenticated…
• CVE-2025-21162 — CVSS 5.5 (medium): Photoshop Elements versions 2025.0 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions…