CVE-2026-48344

HighCVSS 7.8

Published: 14/07/2026(UTC)Updated: 28/08/2026(UTC)Translated: 18/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

7th percentile - higher than 7% of all known CVEs

Summary

Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control and does not require user interaction. Scope is changed.

Risk Assessment

The risk involves potential remote code execution on workstations with Creative Cloud Desktop installed, which could lead to full compromise of the user's system.

Recommendation

It is recommended to immediately update Creative Cloud Desktop to the latest version available on the Adobe website. Also monitor vendor communications for security patches.

Other vulnerabilities in Creative Cloud Desktop

CVE-2026-48272High
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control and does not require user interaction. The scope has changed.

Original NVD description (English source)

Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.