What is CVE-2026-34632?

CVE-2026-34632 is a high-severity vulnerability in Adobe Photoshop Installer, classified under Uncontrolled Search Path Element. CVSS score: 8.6/10. Published 2026-04-15.

How severe is CVE-2026-34632?

High severity. CVSS v3 base score is 8.6 out of 10.

Vulnerability in Adobe Photoshop Installer

CVE-2026-34632

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the installer. Exploitation of this issue required user interaction in that a victim must have been running the installer. Scope is changed.

EPSS: 0.003 (19.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H.

Affected products

Adobe Photoshop Installer — versions 0
Adobe Photoshop_installer — versions 2.11.0.30
Adobe Photoshop_set-up.exe — versions 2.11.0.30

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

psirt@adobe.com (Technical Description)
af854a3a-2127-422b-91ae-364da2661108 (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2026-34632?: CVE-2026-34632 is a high-severity vulnerability in Adobe Photoshop Installer, classified under Uncontrolled Search Path Element. CVSS score: 8.6/10. Published 2026-04-15.
How severe is CVE-2026-34632?: High severity. CVSS v3 base score is 8.6 out of 10.