CVE-2026-48272highCWE-427

CVE-2026-48272: high-severity vulnerability in Adobe Creative Cloud Desktop

Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)

Published · Updated

Follow this CVE+ Monitor Creative Cloud Desktop

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 0.2%
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
Adobe · Creative Cloud Desktop
Related CVEs — Adobe Creative Cloud Desktop

In the same product, most dangerous first.

CVE-2024-34116HIGHAdobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege EscalationEPSS 0.3%CVE-2025-64896MEDIUMCreative Cloud Desktop | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)EPSS 0.2%CVE-2026-48344HIGHGoCart | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)EPSS 0.2%CVE-2025-54271MEDIUMCreative Cloud Desktop | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)EPSS 0.1%