CVE-2026-48272

תיאור (מקור, אנגלית)

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.

מדדים

CVSS 3.1

7.8 (HIGH) מקור הציון: CNA CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-8/8/2026

CWE

CWE-427

מוצרים מושפעים

adobe: creative cloud desktop application; microsoft: windows

קישורים

• https://helpx.adobe.com/security/products/creative-cloud/apsb26-77.html Vendor Advisory