Vulnerability in Adobe Photoshop Installer

CVE-2026-48388

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the installer. Exploitation of this issue required user interaction in that a victim must have been running the installer. Scope is changed.

EPSS: 0.002 (7.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-48388?
CVE-2026-48388 is a high-severity vulnerability in Adobe Photoshop Installer, classified under Uncontrolled Search Path Element. CVSS score: 8.6/10. Published 2026-07-28.
How severe is CVE-2026-48388?
High severity. CVSS v3 base score is 8.6 out of 10.