CVE-2026-104349: Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
A low-privileged attacker can exploit it, but exploitation requires the victim to open a malicious file. The resulting arbitrary code execution occurs in the context of the current user.
Are unattended or purely remote attacks described by the available information?
No. The available information states that user interaction is required because a victim must open a malicious file.
What is the likely impact if exploitation succeeds?
An attacker could execute arbitrary code with the permissions of the current user. The provided severity vector indicates impacts to confidentiality, integrity, and availability are all high.