CVE-2026-48272

Analyzed Analyzed - Analysis Complete

Uncontrolled Search Path Element in Creative Cloud Desktop

Publication date: 2026-07-14

Last updated on: 2026-07-17

Assigner: Adobe Systems Incorporated

Description

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-14

Last Modified

2026-07-17

Generated

2026-08-04

AI Q&A

2026-07-15

EPSS Evaluated

2026-08-02

NVD

CVE-2026-48272

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	creative_cloud_desktop_application	to 6.9.1.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-427	The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Attack-Flow Graph

Executive Summary

This vulnerability is an Uncontrolled Search Path Element issue in Adobe Creative Cloud Desktop. It allows arbitrary code execution in the context of the current user. Exploitation depends on conditions outside the attacker's control and does not require user interaction. The scope of the vulnerability is changed.

Detection Guidance

Detection of CVE-2026-48272 requires checking for Uncontrolled Search Path Element vulnerabilities in Adobe Creative Cloud Desktop. Inspect installed versions of Adobe Creative Cloud Desktop and verify if they are up to date. Check system PATH environment variables for suspicious entries pointing to untrusted directories. Review Adobe Creative Cloud Desktop logs for unusual activity or errors related to dynamic library loading.

Impact Analysis

An attacker could exploit this to run malicious code on your system, potentially gaining control over your computer or accessing sensitive data. Since no user interaction is required, the risk is higher as attacks could occur silently in the background.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR's data protection requirements or HIPAA's safeguards for protected health information. Organizations may face compliance penalties if exploited.

Mitigation Strategies

Update Creative Cloud Desktop to the latest version as patches may address the Uncontrolled Search Path Element vulnerability.

Hi! I’m here to help you understand CVE-2026-48272. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70