Uncontrolled Search Path Element Vulnerability in Creative Cloud Desktop by Adobe
CVE-2026-104349

7.3HIGH

Key Information:

Vendor

Adobe
Status
Creative Cloud Desktop Application
Vendor
CVE Published:
27 October 2026

What is CVE-2026-104349?

Adobe's Creative Cloud Desktop contains a vulnerability related to an Uncontrolled Search Path Element that may allow a low-privileged attacker to execute arbitrary code within the context of the current user. Exploitation necessitates user interaction; specifically, a user must open a crafted file that the attacker provides. Users of Creative Cloud Desktop should remain vigilant and ensure that they only open files from trusted sources to mitigate the risk associated with this vulnerability.

Affected Version(s)

Creative Cloud Desktop Application 0 <= 6.10.0.252.41

Creative Cloud Desktop Application 6.11.0.478.6

References

https://www.adobe.com/trust/security/products/creative-cl...
vendor-advisory

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.