CVE-2026-103845

Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in…

Risk score: 54/100
CVSS: 8.6 v3.1
Exploit chance (30 days): 0.2%
Published: 13 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a …
Affected: See advisory
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Why it is Yellow

CVSS 8.6 high

References

https://www.adobe.com/trust/security/products/dimension/apsb26-171.html

Original description

Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must run the application. Scope is changed.

Last activity 13 Oct 2026. Patch Forecast updates every hour.