PT-2026-33123 · Adobe · Photoshop Installer

Published 2025-09-23 · Updated 2026-04-16 · CVE-2026-34632

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Adobe Photoshop Installer (affected versions not specified)

Description An Uncontrolled Search Path Element issue exists where a low-privileged local attacker could manipulate the search path used by the application to locate critical resources. This could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically that a user must be running the installer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Improper Access Control

Weakness Enumeration

CWE-427

CWE-284

Related Identifiers

BDU:2026-07112

CVE-2026-34632

Affected Products

Photoshop Installer

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-34632 · Security Note
• https://bdu.fstec.ru/vul/2026-07112 · Security Note
• https://cwe.mitre.org/data/definitions/427.html · Note
• https://helpx.adobe.com/security/products/photoshop/apsb26-40.html · Note
• https://talosintelligence.com/vulnerability_reports/TALOS-2025-2274 · Note
• https://twitter.com/CVEnew/status/2044737933358305459 · Twitter Post
• https://twitter.com/ptdbugs/status/2044726008587116734 · Twitter Post
• https://feedly.com/cve/CVE-2026-34632 · Note