APSB21-31 Security update available for Adobe Creative Cloud Desktop Application

Adobe has released an update for the Creative Cloud Desktop Application for Windows. This update includes a fix for a critical vulnerability that could lead to arbitrary code execution in the context of current user...

The vulnerability of the graphic editor application for Adobe Creative Cloud Desktop Application lies in insufficient validation of input data, which allows a malicious individual to escalate their privileges.

The vulnerability of the Adobe Creative Cloud Desktop Application is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app, related to incorrect handling of the search path, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to improper handling of the search path. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Adobe Creative Cloud Desktop Application, related to the creation of temporary files with insecure resolutions, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Creative Cloud Desktop Application is related to the creation of temporary files with insecure resolutions. Exploiting this vulnerability could allow a hacker to execute arbitrary code...

Adobe Creative Cloud Improper Privilege Management Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Adobe Creative Cloud on Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

CVE-2021-21078

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction...

CVE-2021-21078

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction...

CVE-2021-21069

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction...

CVE-2021-21069

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction...

CVE-2021-21068

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a file handling vulnerability that could allow an attacker to cause arbitrary file overwriting. Exploitation of this issue requires physical access and user interaction...

CVE-2021-21068

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a file handling vulnerability that could allow an attacker to cause arbitrary file overwriting. Exploitation of this issue requires physical access and user interaction...

Design/Logic Flaw

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a file handling vulnerability that could allow an attacker to cause arbitrary file overwriting. Exploitation of this issue requires physical access and user interaction...

Design/Logic Flaw

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction...

Privilege escalation

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction...

CVE-2021-21078 Adobe Creative Cloud Unquoted Service Path in CCXProcess

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction...

CVE-2021-21078

Summary (CVE-2021-21078) : Adobe Creative Cloud Desktop Application versions 5.3 and earlier are affected by an Unquoted Service Path in CCXProcess that could enable arbitrary code execution in the current user’s process. Exploitation requires user interaction. The issue is documented in the APSB...

CVE-2021-21068

Adobe Creative Cloud Desktop Application (Windows/macOS) 5.3 and earlier is affected by a file-handling vulnerability that can lead to arbitrary file overwriting. Exploitation requires physical access and user interaction (local/physical vector). Multiple sources indicate broader impact that coul...

CVE-2021-21068 Adobe Creative Cloud installer arbitrary file overwrite vulnerability

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a file handling vulnerability that could allow an attacker to cause arbitrary file overwriting. Exploitation of this issue requires physical access and user interaction...

CVE-2021-21068 Adobe Creative Cloud installer arbitrary file overwrite vulnerability

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a file handling vulnerability that could allow an attacker to cause arbitrary file overwriting. Exploitation of this issue requires physical access and user interaction...

CVE-2021-21069 Adobe Creative Cloud Privilege Escalation Vulnerability

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction...