Adobe Creative Cloud Desktop: Uncontrolled Search Path Exec
CVE-2026-48272 Published on July 14, 2026

Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-48272 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
LOCAL
Attack Complexity:
HIGH
Privileges Required:
LOW
User Interaction:
NONE
Scope:
CHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

What is a DLL preloading Vulnerability?

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

CVE-2026-48272 has been classified to as a DLL preloading vulnerability or weakness.


Products Associated with CVE-2026-48272

Want to know whenever a new CVE is published for Adobe Creative Cloud Desktop Application? stack.watch will email you.

Adobe Creative Cloud Desktop Application
 

Affected Versions

Adobe Creative Cloud Desktop: