CVE-2026-76199
HighCVSS 8.6Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Risk Assessment
Arbitrary code execution could allow an attacker to take control of the user's session, steal data, or install malware.
Recommendation
Update Photoshop to the latest version and avoid opening files from untrusted sources.
Other vulnerabilities in Adobe Photoshop
See all- CVE-2017-3005High
Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have an unquoted search path vulnerability.
- CVE-2017-3004High
Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have a memory corruption vulnerability when parsing malicious PCX files. Successful exploitation could lead to arbitrary code execution.
- CVE-2017-11304Critical
A use-after-free vulnerability was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. Successful exploitation could lead to arbitrary code execution.
- CVE-2017-11303Critical
A memory corruption vulnerability was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. Successful exploitation could lead to arbitrary code execution.
Original NVD description (English source)
Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.