CVE-2021-28594

The CVE-2021-28594 entry concerns Adobe Creative Cloud Desktop Application installer (2.4 and earlier). The vulnerability is an Uncontrolled Search Path Element in the installer, allowing arbitrary code execution in the current user context. Exploitation requires user interaction (victim opens a ...

Mozilla VPN 安全特征问题漏洞

Mozilla VPN is an open source virtual private network Web browser extension, desktop application and mobile application from the Mozilla Foundation in the U.S. A security vulnerability exists in versions of Mozilla VPN prior to 2.3. An attacker could exploit the vulnerability to gain control of t...

Unspecified Vulnerability in Rocket.Chat

Rocket.Chat is an open source team chat software. A security vulnerability exists in the Rocket.Chat desktop application version 2.17.11, which originates from the ability to open external links without user interaction. No details of the vulnerability are available at this time...

CVE-2020-26763

The Rocket.Chat desktop application 2.17.11 opens external links without user interaction...

CVE-2020-26763

The Rocket.Chat desktop application 2.17.11 opens external links without user interaction...

Design/Logic Flaw

The Rocket.Chat desktop application 2.17.11 opens external links without user interaction...

CVE-2020-26763

Affected product: Rocket.Chat Desktop (version 2.17.11). Vulnerability: the desktop app opens external links without user interaction, with CVSSv3.1 base score 7.5 (network, low complexity, no privileges required, UI interaction not required; integrity impact HIGH; confidentiality/availability NO...

CVE-2020-26763

The Rocket.Chat desktop application 2.17.11 opens external links without user interaction...

Creative Cloud Desktop Application 安全漏洞

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An arbitrary file system write vulnerability exists in Adobe Creative Cloud Desktop Application 2.4 and earlier versions. The vulnerability originates from the creation of...

Creative Cloud Desktop Application 代码问题漏洞

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An uncontrolled search path element vulnerability exists in Adobe Creative Cloud Desktop Application 2.4 and earlier versions. An attacker can exploit this vulnerability to...

APSB21-41 Security update available for Adobe Creative Cloud Desktop Application

Adobe has released an update for the Creative Cloud Desktop installer for Windows and macOS. This update includes a fix for a critical and an important vulnerability that could lead to arbitrary code execution in the context of current user...

OpenText Brava! Desktop out-of-bounds write vulnerability (CNVD-2021-42322)

OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. An out-of-bounds write vulnerability exists in the parsing of DWF files in OpenText Brava! Desktop. The vulnerability stems from a lack of proper validation of...

Adobe Creative Cloud Desktop Application 代码问题漏洞

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An uncontrolled search path element vulnerability exists in Adobe Creative Cloud Desktop Application 5.3 and earlier versions. An attacker can exploit the vulnerability to...

APSB21-31 Security update available for Adobe Creative Cloud Desktop Application

Adobe has released an update for the Creative Cloud Desktop Application for Windows. This update includes a fix for a critical vulnerability that could lead to arbitrary code execution in the context of current user...

CVE-2021-21078

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction...

CVE-2021-21069

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction...

Design/Logic Flaw

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction...

Privilege escalation

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction...

CVE-2021-21078

Summary (CVE-2021-21078) : Adobe Creative Cloud Desktop Application versions 5.3 and earlier are affected by an Unquoted Service Path in CCXProcess that could enable arbitrary code execution in the current user’s process. Exploitation requires user interaction. The issue is documented in the APSB...

CVE-2021-21068

Adobe Creative Cloud Desktop Application (Windows/macOS) 5.3 and earlier is affected by a file-handling vulnerability that can lead to arbitrary file overwriting. Exploitation requires physical access and user interaction (local/physical vector). Multiple sources indicate broader impact that coul...