Adobe Security Bulletin
Last updated on Jul 14, 2026
Security update available for Adobe Creative Cloud Desktop Application | APSB26-77
Summary
Adobe has released an update for the Creative Cloud Desktop for Windows. This update includes a fix for critical vulnerabilities that could lead to arbitrary code execution in the context of the current user.
Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates.
Affected Versions
Solution
Adobe categorizes this update with the following priority rating and recommends users update their installation to the newest version:
Vulnerability Details
Acknowledgments:
Adobe would like to thank the following for reporting the relevant issues and for working with Adobe to help protect our customers:
- Brandon Evans of TrendAI Zero Day Initiative - CVE-2026-48272, CVE-2026-48344
NOTE: Adobe has a public bug bounty program with HackerOne. If you are interested in working with Adobe as an external security researcher, please check out https://app.intigriti.com/programs/adobe/adobepublic/detail.
For more information, visit https://www.adobe.com/trust/security/bug-bounty.html, or email PSIRT@adobe.com.
