High severity · published Sep 8, 2026
CVE-2026-76199
Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)
8.6
CVSS
0.3%
EPSS
No
On KEV
Description
Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
P2
Photoshop 2025 · Adobe
through 26.11.6 · source: vendor
P2
Photoshop 2026 · Adobe
through 27.6 · source: vendor
PH
Photoshop · Adobe
26.0 before 26.11.7; 27.0 before 27.7 · source: NVD
Affected product
P2
Photoshop 2025
Adobe
More from Photoshop 2025
7.8
CVE-2026-75771
Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)
7.8
CVE-2026-75631
Photoshop Desktop | Out-of-bounds Write (CWE-787)
7.8
CVE-2026-75862
Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)
7.8
CVE-2026-82005
Photoshop Desktop | Out-of-bounds Write (CWE-787)
7.8
CVE-2026-82007
Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)