An uncontrolled search path vulnerability in the Adobe Photoshop Installer can lead to arbitrary code execution, granting an attacker the same permissions as the user running the installer.

This is an Uncontrolled Search Path Element (CWE-427) vulnerability. It allows an attacker to place malicious files in a location where the installer might search for dependencies, leading to the execution of arbitrary code when the installer is launched by a user.

The CVSS score of 8.6 indicates a high risk, particularly in corporate environments where software installation is common. If successfully exploited, an attacker could gain full control over the user account, leading to data exfiltration, installation of malware, or further lateral movement within the network.

Immediate Action: Ensure all users are running the most recent version of the Adobe Photoshop Installer and follow official Adobe security bulletins for any specific patch instructions.

Proactive Monitoring: Monitor endpoint systems for unauthorized file drops in directories commonly used by installers and review logs for unexpected process execution chains.

Compensating Controls: Implement strict application control policies that prevent users from executing installers from untrusted or writable directories, thereby mitigating the risk of search path manipulation.

Public Exploit Available: No

Given that this vulnerability affects the installer, it is critical to ensure that software deployment is handled through authorized, secure channels. Organizations should verify their current version of the Adobe Photoshop Installer against the latest vendor releases and maintain strict controls over user permissions to prevent unauthorized code execution.