CVE-2026-48388

HighCVSS 8.6

Published: 28/07/2026(UTC)Updated: 26/08/2026(UTC)Translated: 29/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

7th percentile - higher than 7% of all known CVEs

Summary

Adobe Photoshop Installer is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker can place a malicious library in a directory searched by the installer. Exploitation requires user interaction (running the installer).

Risk Assessment

An attacker can achieve code execution on the victim's machine with the current user's privileges, potentially leading to malware installation or data theft.

Recommendation

Download the Adobe Photoshop installer only from the official source and run it in a restricted privilege environment.

Other vulnerabilities in Adobe Photoshop Installer

CVE-2026-34632High
Adobe Photoshop Installer is affected by an Uncontrolled Search Path Element vulnerability that could lead to arbitrary code execution in the context of the current user. An attacker can exploit this by placing a malicious library in a directory searched by the installer. Exploitation requires user interaction as the victim must run the installer.

Original NVD description (English source)

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the installer. Exploitation of this issue required user interaction in that a victim must have been running the installer. Scope is changed.