Adobe Security Bulletin
Security updates available for Adobe Photoshop CC | APSB18-43
Bulletin ID Date Published Priority
APSB18-43 November 13, 2018 3

Summary

Adobe has released updates for Photoshop CC for Windows and macOS. These updates resolve an important vulnerability in Photoshop CC 19.1.6 and earlier 19.x versions.  Successful exploitation could lead to information disclosure.

Affected Product Versions

Product Affected version Platform
Photoshop CC  19.1.6 and earlier Windows and macOS

Solution

Adobe recommends users update their software installations via each application's update mechanism by launching each application, navigating to the Help menu, and clicking "Updates." For more information, please reference this help page.

Product Updated versions Platform
Photoshop CC  19.1.7 Windows and macOS
Photoshop CC 20.0 Windows and macOS

Note:

For managed environments, IT administrators can use the Creative Cloud Packager to create deployment packages. Refer to this help page for more information on the Creative Cloud Packager. 

Version 19.1.7 will be available for download beginning in the evening Pacific Standard Time on November 13.

 

Vulnerability details

Vulnerability Category Vulnerability Impact Severity CVE Number
Out-of-bounds read Information disclosure Important CVE-2018-15980

Acknowledgments

Adobe would like to thank Anonymous working with Trend Micro's Zero Day Initiative for reporting this issue and for working with Adobe to help protect our customers.