Live › vulnerability › CVE-2026-104349
Go to dashboardCreative Cloud Desktop loads a library or component from an uncontrolled search path. A low-privileged attacker who gets a victim to open a malicious file can run arbitrary code in the victim's user context.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 17:32 UTC. All times on this page are UTC.
Machines with Adobe Creative Cloud Desktop installed. Exposure depends on the user opening an attacker-supplied file, so managed machines with no Creative Cloud install can skip it. The sources do not list affected or fixed Creative Cloud Desktop versions.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
This page as .md · .json · in your agent: get_signal("CVE-2026-104349")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.