What is CVE-2026-34632?

CVE-2026-34632 is a high-severity vulnerability in Adobe Photoshop Installer, classified under Uncontrolled Search Path Element. CVSS score: 8.6/10. Published 2026-04-15.

How severe is CVE-2026-34632?

High severity. CVSS v3 base score is 8.6 out of 10.

Vulnerability in Adobe Photoshop Installer

CVE-2026-34632

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by pla…

EPSS: 0.003 (19.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H.

Affected products

Adobe Photoshop Installer — versions 0
Adobe Photoshop_installer — versions 2.11.0.30
Adobe Photoshop_set-up.exe — versions 2.11.0.30

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

psirt@adobe.com (Technical Description)
af854a3a-2127-422b-91ae-364da2661108 (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2026-34632?: CVE-2026-34632 is a high-severity vulnerability in Adobe Photoshop Installer, classified under Uncontrolled Search Path Element. CVSS score: 8.6/10. Published 2026-04-15.
How severe is CVE-2026-34632?: High severity. CVSS v3 base score is 8.6 out of 10.