The Adobe Photoshop Installer contains an uncontrolled search path element vulnerability (CWE-427) that allows a local attacker with low privileges to influence the search path for critical resources. By doing so, the attacker could cause the installer to load malicious code, resulting in arbitrary code execution within the context of the current user. Exploitation requires that the user is actively running the installer, and the vulnerability impacts confidentiality, integrity, and availability with a CVSS v3.1 score of 8.2 (AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H). No official patch or remediation level has been published yet, and no known exploits are reported in the wild.

Successful exploitation could lead to arbitrary code execution with the privileges of the current user running the installer. This could compromise confidentiality, integrity, and availability of the affected system. Since the attacker requires local access and user interaction, the attack vector is limited but still significant due to the high impact on system security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid running the Adobe Photoshop Installer from untrusted locations and ensure that local system permissions restrict unauthorized modification of directories involved in the installer's search path. Monitor Adobe's official channels for updates and apply any forthcoming patches promptly.