CVE-2010-3127: Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly rem...

Security readout for executives and security teams

CVE-2010-3127 is an old Adobe Photoshop issue where opening or processing a PSD or other file from an unsafe folder could cause Photoshop to load an attacker-placed Windows DLL from that folder. This could let code run with the user’s privileges. Sources do not provide a CVSS score or confirmed active exploitation. Exposure is most likely where legacy Photoshop CS2-CS5 remains installed, especially on workstations handling PSDs or files from downloads, email, removable media, or shared folders. Modern environments without these versions are unlikely to be exposed based on the provided sources. Treat this as a legacy software risk, not an internet-wide emergency. Prioritize finding and retiring affected Photoshop versions on user workstations that process external creative files. Escalate if those systems handle high-trust credentials, sensitive client material, or unmanaged third-party file intake. Mitigation focus: Inventory endpoints for Adobe Photoshop CS2 through CS5 installations.; Check Adobe guidance for any applicable update, workaround, or retirement recommendation.; Remove or isolate unsupported legacy Photoshop versions where business permits..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.