Adobe Security Bulletin
Last updated on October 27, 2026
Security update available for Adobe Creative Cloud Desktop Application | APSB26-135
Summary
Adobe has released a priority 3 update for the Creative Cloud Desktop for Windows. This update resolves a vulnerability rated high that could result in privilege escalation in the context of the user.
Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates.
Affected Versions
Solution
Adobe categorizes this update with the following priority rating and recommends users update their installation to the newest version via the Creative Cloud desktop app's update mechanism. For more information, please reference this help page.
For managed environments, IT administrators can use the Admin Console to deploy Creative Cloud applications to end users. Refer to this help page for more information.
Vulnerability Details
Acknowledgments:
Adobe would like to thank the following for reporting the relevant issues and for working with Adobe to help protect our customers:
- ping (everping) – CVE-2026-104349
NOTE: Adobe maintains a public bug bounty program through Intigriti. If you’re an external security researcher interested in identifying and responsibly reporting potential security vulnerabilities to Adobe, please visit the Adobe Bug Bounty Program for more information.
For more information, visit Adobe Security Bulletin and Advisories or email PSIRT@adobe.com.
