CVE-2021-21069

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction...

Privilege escalation

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction...

Design/Logic Flaw

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction...

CVE-2021-21078

Summary (CVE-2021-21078) : Adobe Creative Cloud Desktop Application versions 5.3 and earlier are affected by an Unquoted Service Path in CCXProcess that could enable arbitrary code execution in the current user’s process. Exploitation requires user interaction. The issue is documented in the APSB...

CVE-2021-21068

Adobe Creative Cloud Desktop Application (Windows/macOS) 5.3 and earlier is affected by a file-handling vulnerability that can lead to arbitrary file overwriting. Exploitation requires physical access and user interaction (local/physical vector). Multiple sources indicate broader impact that coul...

CVE-2021-21069

CVE-2021-21069 pertains to Adobe Creative Cloud Desktop Application 5.3 and earlier, where a local privilege escalation could let an attacker call installer functions to perform high-privilege actions. Exploitation reportedly requires no user interaction. Affected product details are confirmed ac...

CVE-2021-21078: Untrusted Search Path

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction...

CVE-2021-21069: Improper Input Validation

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction...

CVE-2021-21068: Creation of Temporary File in Directory with Insecure Permissions

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a file handling vulnerability that could allow an attacker to cause arbitrary file overwriting. Exploitation of this issue requires physical access and user interaction...

Adobe Creative Cloud Desktop Application 代码问题漏洞

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. A command injection vulnerability exists in Adobe Creative Cloud Desktop Application 5.3 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary...

Adobe Creative Cloud Desktop Application 输入验证错误漏洞

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An improper input validation vulnerability exists in Adobe Creative Cloud Desktop Application 5.3 and earlier versions. An attacker could exploit the vulnerability to elevate...

Adobe Creative Cloud Desktop Application 安全漏洞

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An arbitrary file overwrite vulnerability exists in Adobe Creative Cloud Desktop Application 5.3 and earlier versions. An attacker can exploit this vulnerability to execute...

PT-2021-2517

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions 5.3 and earlier Description The issue is related to the creation of temporary files with insecure permissions in the Adobe Creative Cloud Desktop Application. Exploitation of this issue could...

PT-2021-2521

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions 5.3 and earlier Description The issue is related to insufficient input validation in the Adobe Creative Cloud Desktop Application, which can lead to a local privilege escalation. This allows an...

PT-2021-2520

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application version 5.3 and earlier Description The issue is related to an Unquoted Service Path vulnerability in CCXProcess, which could allow an attacker to achieve arbitrary code execution in the process of the...

APSB21-18 Security update available for Adobe Creative Cloud Desktop Application

Adobe has released a security update for the Creative Cloud Desktop Application. This update resolves multiple critical vulnerabilities that could lead to arbitrary code execution in the context of current user...

Zulip Desktop License Issue Vulnerability

Zulip Desktop is a desktop version of the team chat application from Zulip USA. An authorization issue vulnerability exists in versions prior to Zulip Desktop 5.0.0, which stems from allowing an attacker to record from a webcam and microphone because of an unprivileged request processor...

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an incorrect definition of the link before accessing a file. This allows a malicious user to write any files into the device’s file system.

The vulnerability of the Adobe Creative Cloud Desktop Application is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow a malicious actor to write arbitrary files to the device’s file system remotely...

Drag and then drop files between a Citrix session and a local endpoint

Citrix now supports Dragging and then dropping files between a Citrix session and a local endpoint. You can drag and then drop files, groups of files, directories, groups of directories, or a combination of files and directories to and from the same client on the session. This ability applies to ...

360 Secure Desktop suffers from dll hijacking vulnerability

360 Secure Desktop is a desktop application management software that helps you better organize your computer desktop documents and settings. 360 Secure Desktop has a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...