CVE-2026-34632

HighCVSS 8.6

Published: 15/04/2026(UTC)Updated: 29/07/2026(UTC)Translated: 21/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

19th percentile - higher than 19% of all known CVEs

Summary

Adobe Photoshop Installer is affected by an Uncontrolled Search Path Element vulnerability that could lead to arbitrary code execution in the context of the current user. An attacker can exploit this by placing a malicious library in a directory searched by the installer. Exploitation requires user interaction as the victim must run the installer.

Risk Assessment

The risk to the organization is the potential takeover of a user's workstation during Adobe Photoshop installation, which could lead to data theft, malware installation, or further propagation of the attack within the network.

Recommendation

It is recommended to immediately update the Adobe Photoshop installer to the latest version provided by the vendor and apply the principle of least privilege during software installation. Also avoid running installers from untrusted locations.

Other vulnerabilities in Adobe Photoshop Installer

CVE-2026-48388High
Adobe Photoshop Installer is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker can place a malicious library in a directory searched by the installer. Exploitation requires user interaction (running the installer).

Original NVD description (English source)

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the installer. Exploitation of this issue required user interaction in that a victim must have been running the installer. Scope is changed.