CVE-2026-48388 — HIGH (8.6)

Vulnerability Description

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the installer. Exploitation of this issue required user interaction in that a victim must have been running the installer. Scope is changed.

CVSS Score

8.6

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Adobe	Photoshop Installer	-

Related Weaknesses (CWE)

CWE-427

References

https://cwe.mitre.org/data/definitions/427.htmlTechnical Description

FAQ

What is CVE-2026-48388?

CVE-2026-48388 is a vulnerability with a CVSS score of 8.6 (HIGH). Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could h...

How severe is CVE-2026-48388?

CVE-2026-48388 has been rated HIGH with a CVSS base score of 8.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-48388?

Check the references section above for vendor advisories and patch information. Affected products include: Adobe Photoshop Installer.