CVE-2026-76199
High · 8.6CVSS
8.6
EPSS
0.3%
Published
Sep 8, 2026
CISA due date
—
The record
Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-87530 Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows… CWE-427
- CVE-2026-45221 Konga before 2.1.0 contains a privilege escalation vulnerability that allows… CWE-427
- CVE-2026-19590 OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks… CWE-427
- CVE-2026-82649 SiYuan Windows installer before version 3.8.1 (affected versions >= 2.0.14) contains an… CWE-427
- CVE-2026-65093 NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a… CWE-427
- CVE-2026-50773 An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote… CWE-427
- CVE-2026-56090 Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Uncontrolled Search Path… CWE-427
- CVE-2026-0294 A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent… CWE-427