Adobe Photoshop Installer
Monthly
Arbitrary code execution is possible in the Adobe Photoshop Installer through an uncontrolled search path element (CWE-427), where a malicious library planted in a directory the installer searches is loaded when the installer runs. Exploitation is local and requires user interaction - an attacker must first place a malicious library on the target system and then convince a victim to launch the installer, after which code runs in the context of that user rather than with elevated privileges. Public exploitation signals are weak: there is no confirmed active exploitation (not in CISA KEV), no public exploit identified at time of analysis, and EPSS is only 0.17% (7th percentile), although the CVSS base score of 8.6 and a 'total' technical impact rating keep it relevant for hardening. The CVSS vector (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) indicates a local, unauthenticated attack path that nonetheless depends on user initiation and a writable directory within the installer's search path.
Uncontrolled search path vulnerability in Adobe Photoshop Installer allows a low-privileged local attacker to execute arbitrary code in the context of the current user. Exploitation requires the user to run the installer from a location where the attacker has planted malicious dependencies. No active exploitation or public exploit code has been identified, and the EPSS chance of exploitation is extremely low (0.01%).
Arbitrary code execution is possible in the Adobe Photoshop Installer through an uncontrolled search path element (CWE-427), where a malicious library planted in a directory the installer searches is loaded when the installer runs. Exploitation is local and requires user interaction - an attacker must first place a malicious library on the target system and then convince a victim to launch the installer, after which code runs in the context of that user rather than with elevated privileges. Public exploitation signals are weak: there is no confirmed active exploitation (not in CISA KEV), no public exploit identified at time of analysis, and EPSS is only 0.17% (7th percentile), although the CVSS base score of 8.6 and a 'total' technical impact rating keep it relevant for hardening. The CVSS vector (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) indicates a local, unauthenticated attack path that nonetheless depends on user initiation and a writable directory within the installer's search path.
Uncontrolled search path vulnerability in Adobe Photoshop Installer allows a low-privileged local attacker to execute arbitrary code in the context of the current user. Exploitation requires the user to run the installer from a location where the attacker has planted malicious dependencies. No active exploitation or public exploit code has been identified, and the EPSS chance of exploitation is extremely low (0.01%).