Skip to main content
markn18791413
Participant
May 6, 2021
Answered

Vulnerability in node.exe in Adobe Photoshop 2021 directory

Hi, our Microsoft Advanced protection system detects that there is an active exploit in node.exe in photoshop 2021.

It is a particularly out of date version of  8.11.1 and has active exploits.

Do we know when this will be patched out?

 

Thanks

    This topic is closed to new replies. Start a new post to keep the conversation going.
    markn18791413Correct answer
    Participant
    June 21, 2021

    HI

     

    I went on support with the Adobe Engineer.  He said that the node.exe in photoshop was indeed out of date.  He will have it updated on the next photoshop update.

     

    He did suggest copying the node file from C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\ and pasting it into photoshop and replacing it (backing up the old node file first).

     

    This is something you do at your own risk, I will wait for the next update.

     

    🙂

    View reply

    12 replies

    defaultdzaaj989ge9d
    Participant
    July 25, 2021

    Another one I found, in dream weaver

    Adobe\Adobe Dreamweaver 2021\node\node.exe

    the version of node is listed as 6.17.1

    this is quite out of date

    Translate
    networka92188940
    networka92188940
    Participant
    May 27, 2021

    We have the same question. In reading past posts regarding Node.exe, It would be helpfull of Adobe was more proactive about fixing vunerabilities in third products bundled with their product.

     

    Version of Photoshop is current, 22.4.1

    Version of NodeJS is 8.11.1.0 which A) is an EOS version and B) with exploits avalible

     

    C:\Program Files\Adobe\Adobe Photoshop 2021\node.exe

    Translate
    markn18791413AuthorCorrect answer
    Participant
    June 21, 2021

    HI

     

    I went on support with the Adobe Engineer.  He said that the node.exe in photoshop was indeed out of date.  He will have it updated on the next photoshop update.

     

    He did suggest copying the node file from C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\ and pasting it into photoshop and replacing it (backing up the old node file first).

     

    This is something you do at your own risk, I will wait for the next update.

     

    🙂

    Translate
    Test Screen Name
    Legend
    May 6, 2021

    Have you told Microsoft so they can fix this false positive? You seem to be jumping ahead from a report to a definite.

    Translate
    Kieren5C7F
    Participant
    May 18, 2021

    We are experiencing the same. node.exe version 8.11.1 is listed as End of Support with 11 vulnerabilities.

    Node.js website specifies version 16 as the latest stable version.

    This needs to be updated by Adobe asap.

     

    C:\Program Files\Adobe\Adobe Photoshop 2021\node.exe

    Translate
    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices