Uncontrolled Search Path Element in Adobe Dimension allows a local attacker to manipulate the library search order so that the application loads malicious components. When a user launches the application, the altered path can cause it to load attacker‑supplied executables or DLLs, resulting in arbitrary code execution under the victim’s user account. Because the flaw changes the effective search path, the executed code can potentially expand its privileges, raising the impact beyond the original user context.

All releases of Adobe Dimension across supported platforms are vulnerable. The advisory does not specify exact version ranges, so every pre‑patch installation is considered at risk.

The CVSS v3.1 score of 8.6 indicates high severity, and with an EPSS score below 1 % and no listing in the CISA KEV catalog the probability of widespread exploitation remains low. Exploitation needs a local attacker with user‑level permissions who can influence the environment or supply a malicious search path; the attacker must run the application to trigger the flaw. Based on the description, it is inferred that any code execution could potentially expand the attacker’s capabilities within the machine, but this elevation is not explicitly confirmed in the advisory.