CVE-2021-28547

Adobe Creative Cloud Desktop for macOS 5.3 and earlier is affected by a local privilege‑escalation vulnerability that could allow a normal user to delete the OOBE directory and gain permissions to directories under administrator authority. Affected component is the installer/OOBE handling; root c...

Design/Logic Flaw

Adobe Creative Cloud Desktop Application version 5.4 and earlier is affected by a file handling vulnerability that could allow an attacker to arbitrarily overwrite a file. Exploitation of this issue requires local access, administrator privileges and user interaction...

CVE-2021-28613

Adobe Creative Cloud Desktop Application

Adobe Creative Cloud Desktop Application 访问控制错误漏洞

Adobe Creative Cloud Desktop Application, the management software for various Creative Cloud applications and services, is vulnerable to an access control error in Adobe Creative Cloud Desktop Application 5.4 and earlier, which could be exploited to write to arbitrary file systems...

The vulnerability of the graphic editor application for Adobe Creative Cloud Desktop Application is caused by a “race condition” that allows a malicious user to delete any file they want.

The vulnerability of the graphic editor application for Adobe Creative Cloud Desktop Application is due to a “race condition”. Exploiting this vulnerability allows an attacker to remotely delete any file they desire...

The vulnerability of the graphic editor application for Adobe Creative Cloud Desktop Application, which arises due to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of the graphic editor application for the Adobe Creative Cloud Desktop Application exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2021-28633

Adobe Creative Cloud Desktop Application installer version 2.4 and earlier is affected by an Insecure temporary file creation vulnerability. An attacker could leverage this vulnerability to cause arbitrary file overwriting in the context of the current user. Exploitation of this issue requires...

CVE-2021-28594

Adobe Creative Cloud Desktop Application installer version 2.4 and earlier is affected by an Uncontrolled Search Path Element vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this...

Design/Logic Flaw

Adobe Creative Cloud Desktop Application installer version 2.4 and earlier is affected by an Insecure temporary file creation vulnerability. An attacker could leverage this vulnerability to cause arbitrary file overwriting in the context of the current user. Exploitation of this issue requires...

Path traversal

Adobe Creative Cloud Desktop Application installer version 2.4 and earlier is affected by an Uncontrolled Search Path Element vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2021-28594 Creative Cloud Desktop installer Uncontrolled Search Path element could lead to arbitrary code execution

Adobe Creative Cloud Desktop Application installer version 2.4 and earlier is affected by an Uncontrolled Search Path Element vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2021-28594

The CVE-2021-28594 entry concerns Adobe Creative Cloud Desktop Application installer (2.4 and earlier). The vulnerability is an Uncontrolled Search Path Element in the installer, allowing arbitrary code execution in the current user context. Exploitation requires user interaction (victim opens a ...

Mozilla VPN 安全特征问题漏洞

Mozilla VPN is an open source virtual private network Web browser extension, desktop application and mobile application from the Mozilla Foundation in the U.S. A security vulnerability exists in versions of Mozilla VPN prior to 2.3. An attacker could exploit the vulnerability to gain control of t...

Unspecified Vulnerability in Rocket.Chat

Rocket.Chat is an open source team chat software. A security vulnerability exists in the Rocket.Chat desktop application version 2.17.11, which originates from the ability to open external links without user interaction. No details of the vulnerability are available at this time...

CVE-2020-26763

The Rocket.Chat desktop application 2.17.11 opens external links without user interaction...

CVE-2020-26763

The Rocket.Chat desktop application 2.17.11 opens external links without user interaction...

Design/Logic Flaw

The Rocket.Chat desktop application 2.17.11 opens external links without user interaction...

CVE-2020-26763

Affected product: Rocket.Chat Desktop (version 2.17.11). Vulnerability: the desktop app opens external links without user interaction, with CVSSv3.1 base score 7.5 (network, low complexity, no privileges required, UI interaction not required; integrity impact HIGH; confidentiality/availability NO...

CVE-2020-26763

The Rocket.Chat desktop application 2.17.11 opens external links without user interaction...

Creative Cloud Desktop Application 安全漏洞

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An arbitrary file system write vulnerability exists in Adobe Creative Cloud Desktop Application 2.4 and earlier versions. The vulnerability originates from the creation of...