Skip to main content
Participant
May 6, 2021
Answered

Vulnerability in node.exe in Adobe Photoshop 2021 directory

  • May 6, 2021
  • 3 replies
  • 7857 views

Hi, our Microsoft Advanced protection system detects that there is an active exploit in node.exe in photoshop 2021.

It is a particularly out of date version of  8.11.1 and has active exploits.

Do we know when this will be patched out?

 

Thanks

This topic has been closed for replies.
Correct answer markn18791413

HI

 

I went on support with the Adobe Engineer.  He said that the node.exe in photoshop was indeed out of date.  He will have it updated on the next photoshop update.

 

He did suggest copying the node file from C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\ and pasting it into photoshop and replacing it (backing up the old node file first).

 

This is something you do at your own risk, I will wait for the next update.

 

🙂

3 replies

Participant
July 25, 2021

Another one I found, in dream weaver

Adobe\Adobe Dreamweaver 2021\node\node.exe

the version of node is listed as 6.17.1

this is quite out of date

networka92188940
Participant
May 27, 2021

We have the same question. In reading past posts regarding Node.exe, It would be helpfull of Adobe was more proactive about fixing vunerabilities in third products bundled with their product.

 

Version of Photoshop is current, 22.4.1

Version of NodeJS is 8.11.1.0 which A) is an EOS version and B) with exploits avalible

 

C:\Program Files\Adobe\Adobe Photoshop 2021\node.exe

markn18791413AuthorCorrect answer
Participant
June 21, 2021

HI

 

I went on support with the Adobe Engineer.  He said that the node.exe in photoshop was indeed out of date.  He will have it updated on the next photoshop update.

 

He did suggest copying the node file from C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\ and pasting it into photoshop and replacing it (backing up the old node file first).

 

This is something you do at your own risk, I will wait for the next update.

 

🙂

Legend
May 6, 2021

Have you told Microsoft so they can fix this false positive? You seem to be jumping ahead from a report to a definite.

Participant
May 18, 2021

We are experiencing the same. node.exe version 8.11.1 is listed as End of Support with 11 vulnerabilities.

Node.js website specifies version 16 as the latest stable version.

This needs to be updated by Adobe asap.

 

C:\Program Files\Adobe\Adobe Photoshop 2021\node.exe