CVE-2026-34632
Last modified
CVE-2026-34632 is a high-severity vulnerability rated 8.6/10 on the CVSS scale. Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the installer. EPSS estimates a 0.27% chance of exploitation in the next 30 days.
Description
Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the installer. Exploitation of this issue required user interaction in that a victim must have been running the installer. Scope is changed.
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Photoshop Installer | 2.11.0.30 |
References
- https://cwe.mitre.org/data/definitions/427.htmlTechnical Description
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2274Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-34632?
How severe is CVE-2026-34632?
How do I fix CVE-2026-34632?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-34627InDesign Desktop versions 20.5.2, 21.2 and earlier are affec…7.8
- CVE-2026-34628InDesign Desktop versions 20.5.2, 21.2 and earlier are affec…7.8
- CVE-2026-34629InDesign Desktop versions 20.5.2, 21.2 and earlier are affec…7.8
- CVE-2026-3463A weakness has been identified in xlnt-community xlnt up to …7.8
- CVE-2026-34630Bridge versions 16.0.2, 15.1.4 and earlier are affected by a…7.8
- CVE-2026-34631InCopy versions 20.5.2, 21.2 and earlier are affected by an …7.8
- CVE-2026-34635is affected by a Use of Hard-coded Cryptographic Key vulnera…8.4
- CVE-2026-34636Premiere Pro versions 26.0.2, 25.6.4 and earlier are affecte…7.8
- CVE-2026-34637Premiere Pro versions 26.0.2, 25.6.4 and earlier are affecte…7.8
- CVE-2026-34638Premiere Pro versions 26.0.2, 25.6.4 and earlier are affecte…7.8
- CVE-2026-34639Media Encoder versions 26.0.2, 25.6.4 and earlier are affect…7.8
- CVE-2026-3464The WP Customer Area plugin for WordPress is vulnerable to a…8.8
Are you affected by CVE-2026-34632?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST