Adobe Discloses Critical Code-Execution Bugs in July Update

Adobe has released its scheduled July 2020 security updates, covering flaws in five different product areas: Creative Cloud Desktop; Media Encoder; Download Manager; Genuine Service; and ColdFusion. Four of the bugs are rated critical in severity, with the others ranked as important. Most of the...

Adobe Issues July 2020 Critical Security Patches for Multiple Software

Adobe today released software updates to patch a total of 13 new security vulnerabilities affecting 5 of its widely used applications. Out of these 13 vulnerabilities, four have been rated critical, and nine are important in severity. The affected products that received security patches today...

Information Leakage Vulnerability in H3C Cloud Desktop System of Xinhua San Technologies Co.

Xinhua San Group is dedicated to worded solutions. It provides one-stop digitalization solutions including cloud computing, big data, intelligent connectivity, information security, new security, IoT, edge computing, artificial intelligence, 5G, etc., as well as end-to-end technical services. An...

H3C Cloud Desktop suffers from information leakage vulnerability

H3C cloud desktop Xinhua San Group self-developed cloud desktop products. H3C Cloud Desktop has an information leakage vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2019-8236

Creative Cloud Desktop Application version 4.6.1 and earlier versions have Security Bypass vulnerability. Successful exploitation could lead to Privilege Escalation in the context of the current user...

CVE-2019-8063

Creative Cloud Desktop Application 4.6.1 and earlier versions have an insecure transmission of sensitive data vulnerability. Successful exploitation could lead to information leakage...

CVE-2019-7959

Creative Cloud Desktop Application versions 4.6.1 and earlier have a using components with known vulnerabilities vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-7957

Creative Cloud Desktop Application versions 4.6.1 and earlier have a security bypass vulnerability. Successful exploitation could lead to denial of service...

CVE-2019-7957

Creative Cloud Desktop Application versions 4.6.1 and earlier have a security bypass vulnerability. Successful exploitation could lead to denial of service...

Code injection

Creative Cloud Desktop Application versions 4.6.1 and earlier have a using components with known vulnerabilities vulnerability. Successful exploitation could lead to arbitrary code execution...

Adobe Creative Cloud Desktop Application Insecure Transfer of Sensitive Data Vulnerability

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An insecure transmission of sensitive data vulnerability exists in Adobe Creative Cloud Desktop Application 4.6.1 and earlier versions. An attacker could exploit this...

CVE-2019-7093

Creative Cloud Desktop Application installer versions 4.7.0.400 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2019-7093

CVE-2019-7093 affects Adobe Creative Cloud Desktop Application installer (Windows) versions 4.7.0.400 and earlier, due to insecure DLL loading (DLL hijacking) in the installer. Exploitation could lead to privilege escalation. Remediation: update to 4.8.0.410 or newer per APSB19-11. If details var...

CVE-2019-7093

Creative Cloud Desktop Application installer versions 4.7.0.400 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

Adobe Creative Cloud Desktop <= 4.5.0.324 Privilege Escalation Vulnerability (APSB18-20)

The version of Adobe Creative Cloud Desktop installed on the remote Windows host is 4.5.0.324 or earlier. It is, therefore, affected by a dll hijacking & privilege escalation vulnerability as noted in the APSB18-20 advisory. Note that Nessus has not tested for these issues but has instead relied...

Adobe Creative Cloud Desktop Application DLL Load Local Elevation of Privilege Vulnerability

Adobe Creatie Cloud Desktop is a suite of applications for managing applications and services in the Creative Cloud Membership Management Center from Adobe USA. The program supports synchronizing and sharing files, managing fonts, and accessing asset libraries for commercial photography and desig...

Code Execution Vulnerability in ZTE uSmartView

uSmartView is a cloud desktop solution. A code execution vulnerability exists in ZTE uSmartView, which can be exploited by attackers to execute code and elevate privileges...

CVE-2018-4873

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Unquoted Search Path vulnerability. Successful exploitation could lead to local privilege escalation...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe Connect, Adobe Flash Player, and Adobe Creative Cloud Desktop Application. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to revi...

ZTE uSmartView Cloud Desktop Solution Has an Untrusted Search Path Vulnerability

uSmartView is ZTE's next-generation cloud desktop office solution officially launched during CeBIT 2016. The ZTE uSmartView cloud desktop solution suffers from an untrustworthy search path vulnerability that can be exploited by attackers to cause elevation of privilege...