VULNERABILITY INTELLIGENCE

CVE-2026-48388

CVSS score8.6 HIGH
EPSS probability0.30%
CISA KEVNot currently listed
Published2026-07-28
Last modified2026-10-23
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Description

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the installer. Exploitation of this issue required user interaction in that a victim must have been running the installer. Scope is changed.

Weakness classification

  • psirt@adobe.com: CWE-427

Primary references