CTI status
As of:
Last pipeline run:
Source reliability
Information credibility
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
The flaw sits in the AdobePDFL PDF/JPEG parsing component and requires user interaction, making email attachments and web downloads the primary attack vector.
The ZDI advisory details CVE-2026-95636, an RCE flaw in Photoshop's DCM pixel processing that can be exploited via crafted image files requiring user interaction.
The disruption of a DPRK IT-worker operation highlights the risk of North Korean sham employment in Western supply chains, even without classic malware.
The report names no active exploitation, attacker, or affected sectors; it describes only a technical memory-exhaustion DoS flaw in OpenSSH compression handling.
Besides the already actively exploited Mark-of-the-Web bypass in Windows Shell, the Exchange and DHCP remote code execution flaws and the high number of Office vulnerabilities are the most practically relevant points of this Patch Tuesday.
The campaign shows that monetized bandwidth theft via compromised network devices, not just classic malware, is an active risk.