Product:
Adobe Photoshop Installer
Summary
Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. A low-privileged local attacker could have exploited this vulnerability by manipulating the search path used by the application to locate critical resources. This could potentially lead to unauthorized code execution, requiring user interaction as the user had to be running the installer.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.2 | CVE-2026-34632 |
Exploitation
To exploit this vulnerability, an attacker must manipulate the search path used by the Adobe Photoshop Installer. This can be achieved by placing malicious files in a location that the installer checks for resources. When the installer is executed by the user, it may inadvertently load and execute the malicious code, leading to arbitrary code execution in the context of the current user.
Affected Products
- Adobe Photoshop Installer: Vulnerable to arbitrary code execution due to an uncontrolled search path element.
Mitigation
To mitigate this vulnerability, users should ensure that they are using the latest version of the Adobe Photoshop Installer and follow best practices for software installation. Additionally, users should avoid running installers from untrusted sources and be cautious of any prompts that require elevated permissions.