PatchTheCVECVE-2026-48388: Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have re
36
Routine
HIGH 8.6MITIGATE
CVE-2026-48388 is a high-severity flaw (CVSS 8.6) affecting photoshop installer. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the installer. Exploitation of this issue required user interaction in that a victim must have been running the installer. Scope is changed.
Why this priority
- High severity
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 8.6 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.3% (top 78%) |
| CISA exploited list | No |
| Weakness | CWE-427 |
| Published | 2026-07-28 |
| Last modified | 2026-10-23 |
Publisher (CNA): Adobe Systems Incorporated · Vendor: adobe
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
adobe photoshop installer MITIGATE
Affected: all versions
Fixed in: no fixed release known
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy photoshop-installer || rpm -q photoshop-installer || photoshop-installer --version
No fixed or unaffected release known
Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.