---
id: CVE-2026-34632
title: >-
  Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element
  vulnerability that could have resulted in arbitrary code execution in the
  context of the current user
summary: >-
  Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element
  vulnerability that could have resulted in arbitrary code execution in the
  context of the current user. A low-privileged local attacker could have
  exploited thi…
severity: high
cvss: 8.2
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H'
cwe:
  - CWE-427
vendor: adobe
product: photoshop_set-up.exe
affected:
  - photoshop_set-up.exe = 2.11.0.30
published: '2026-04-15'
updated: '2026-07-07'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-34632'
references:
  - url: 'https://cwe.mitre.org/data/definitions/427.html'
    label: psirt@adobe.com
  - url: 'https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2274'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00272
epssPercentile: 0.19496
ingestedAt: '2026-07-07T18:42:24.230Z'
---

## Overview

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. A low-privileged local attacker could have exploited this vulnerability by manipulating the search path used by the application to locate critical resources, potentially causing unauthorized code execution. Exploitation of this issue required user interaction in that a user had to be running the installer.

## Affected

- `photoshop_set-up.exe = 2.11.0.30`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.