CVE-2026-34632HIGH 8.6EPSS p21.5%

CVE-2026-34632CVE-2026-34632

adobe / photoshop_installer

Description

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the installer. Exploitation of this issue required user interaction in that a victim must have been running the installer. Scope is changed.

Scoring

CVSS 3.18.6 (HIGH)
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
EPSS0.31% probability of exploitation · percentile 21.5% · 2026-10-05T12:00:23Z
Published2026-04-15
Last modified2026-07-29

Underlying weaknesses· 1

CWE-427

References

  1. https://cwe.mitre.org/data/definitions/427.html
  2. https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2274

1

TypeTargetConfidenceTier
WeaknessUncontrolled Search Path Elementcwe-4270%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-27290
CVE
CVE-2026-27289
CVE
CVE-2026-21333
CVE
CVE-2026-21280
CVE
CVE-2026-47937
CVE
CVE-2026-34653
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.