CVE-2026-48388

{
  "id": "CVE-2026-48388",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-28T18:17:20.887",
  "lastModified": "2026-10-23T23:10:00.157",
  "vulnStatus": "Modified",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by placing a malicious library in a directory searched by the installer. Exploitation of this issue required user interaction in that a victim must have been running the installer. Scope is changed."
    },
    {
      "lang": "es",
      "value": "Adobe Photoshop Installer se vio afectado por una vulnerabilidad de elemento de ruta de búsqueda no controlada que podría haber resultado en ejecución de código arbitrario en el contexto del usuario actual. Un atacante podría haber explotado esta vulnerabilidad al colocar una biblioteca maliciosa en un directorio buscado por el instalador. La explotación de este problema requería interacción del usuario en que una víctima debía haber estado ejecutando el instalador. El alcance ha cambiado."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Adobe",
          "product": "Adobe Photoshop Installer",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThanOrEqual": "N/A",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
          "baseScore": 8.6,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "CHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 6.0
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-28T19:35:03.999809Z",
          "id": "CVE-2026-48388",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-427"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:adobe:photoshop_installer:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B949875F-9F64-4B27-AB66-008E3C00A218"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://cwe.mitre.org/data/definitions/427.html",
      "source": "[email protected]",
      "tags": [
        "Technical Description"
      ]
    },
    {
      "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2026-2360",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ]
}