CVE-2026-48388

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the installer. Exploitation of this issue required user interaction in that a victim must have been running the installer. Scope is changed.

CVSS 3.1

8.6CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS

0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-25)

CWE

CWE-427

Published

2026-07-28

Modified

2026-10-23

Record from

the NVD, synced 2026-10-24

Affected

• adobe:photoshop_installer

References

• https://cwe.mitre.org/data/definitions/427.html
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2026-2360

Check your stackJSON