CVE-2026-34632

Katalog CVE

CVSS 8.6 · High EPSS 0,31%

Kerentanan Uncontrolled Search Path Element pada adobe photoshop installer. Skor CVSS 3.1 8.6 (High) menurut NVD.

Deskripsi (NVD)

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the installer. Exploitation of this issue required user interaction in that a victim must have been running the installer. Scope is changed.

Rincian

Terbit di NVD

15 April 2026

Terakhir diubah

29 Juli 2026

Status NVD

Analyzed

CVSS 3.1

8.6 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-427: Uncontrolled Search Path Element

EPSS (30 hari)

0,31% peluang dieksploitasi; lebih tinggi dari 21,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2274 exploit · advisory pihak ketiga
• https://cwe.mitre.org/data/definitions/427.html deskripsi teknis