CVE-2026-48272

HighCVSS 7.8

Published: 14/07/2026(UTC)Updated: 28/08/2026(UTC)Translated: 18/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

13th percentile - higher than 13% of all known CVEs

Summary

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control and does not require user interaction. The scope has changed.

Risk Assessment

The risk involves potential system compromise by an attacker, leading to data theft, malware installation, or further privilege escalation within the organization.

Recommendation

It is recommended to immediately update Creative Cloud Desktop to the latest version available on the Adobe website. Additionally, restrict user privileges and monitor for unusual system behavior.

Other vulnerabilities in Creative Cloud Desktop

CVE-2026-48344High
Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control and does not require user interaction. Scope is changed.

Original NVD description (English source)

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.