HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-48388 — Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vu...

·Source: NIST NVD

Updated:

Executive Summary

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the installer. Exploitation of this issue required user interaction in that a victim must have been running t

Analysis

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the installer. Exploitation of this issue required user interaction in that a victim must have been running the installer. Scope is changed. CVSS Score: 8.6. Published: 2026-07-28T18:17:20.887.

Indicators of Compromise (1)

CVE (1)
CVE-2026-48388
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 28, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

IoT Sector Given Final EU Cyber Resilience Act Guidance

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/iot-sector-given-final-eu-cyber-resilience-act-guidance-image_small-3-a-32349.jpg" align=right hspace=4><b>Incident Reporting Starts Sept. 11, Other Mandates Wait Until Dec. 11, 2027</b><br>The European Commission published final guidance for complying with the Cyber Resilience Act, a 2024 law that aims to boost the cybersecurity

Bank Info Security
MEDIUMVulnerabilityNEW

Many More Bugs But Exploits Stay Steady

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/so-far-post-mythos-bug-volume-surges-exploits-stay-flat-image_small-5-a-32346.jpg" align=right hspace=4><b>Data Shows Hackers Not Using More Exploits, But They Are Exploiting Flaws Quicker</b><br>The coming of the vulnocalypse - our artificial intelligence-instigated moment of drastically accelerating flaw discovery - has yet to b

Bank Info Security
CRITICALVulnerability

CISA shares advice on isolating vital systems during cyberattacks

The U.S. and Australian governments have released new guidance urging critical infrastructure organizations to prepare to isolate vital operational technology systems in the event of a cyberattack or other major disruptions. [...]

BleepingComputer