Adobe Creative Cloud < 5.4 Multiple Vulnerabilities (APSB21-18)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 5.4. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-18 advisory. - Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a local privilege escalation...

March 2021 Patch Tuesday – 82 Vulnerabilities, 10 Critical, Adobe

This month’s Microsoft Patch Tuesday addresses 82 vulnerabilities, of which 10 are rated with Critical severity. This follows an out-of-band security update on March 2 to address critical vulnerabilities in Microsoft Exchange. Adobe released patches today for its FrameMaker, Creative Cloud Deskto...

Adobe Critical Code-Execution Flaws Plague Windows Users

Adobe has issued patches for a slew of critical security vulnerabilities, which, if exploited, could allow for arbitrary code execution on vulnerable Windows systems. Affected products include Adobe’s Framemaker document processor, designed for writing and editing large or complex documents;...

PT-2021-6626 · Adobe · Adobe Creative Cloud Desktop Application

Name of the Vulnerable Software and Affected Versions: Adobe Creative Cloud Desktop Application for macOS version 5.3 and earlier Description: The issue is related to insufficient input validation in the Adobe Creative Cloud Desktop Application, which could allow an attacker to escalate privilege...

PT-2021-2521

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions 5.3 and earlier Description The issue is related to insufficient input validation in the Adobe Creative Cloud Desktop Application, which can lead to a local privilege escalation. This allows an...

PT-2021-2520

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application version 5.3 and earlier Description The issue is related to an Unquoted Service Path vulnerability in CCXProcess, which could allow an attacker to achieve arbitrary code execution in the process of the...

PT-2021-2517

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions 5.3 and earlier Description The issue is related to the creation of temporary files with insecure permissions in the Adobe Creative Cloud Desktop Application. Exploitation of this issue could...

APSB21-18 Security update available for Adobe Creative Cloud Desktop Application

Adobe has released a security update for the Creative Cloud Desktop Application. This update resolves multiple critical vulnerabilities that could lead to arbitrary code execution in the context of current user...

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app, related to insufficient access control checks for files, allows a malicious individual to escalate their privileges.

The vulnerability of the Adobe Creative Cloud Desktop Application lies in insufficient checks for file access rights. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app lies in the improper handling of the link before accessing the file. This allows attackers to escalate their privileges.

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created application...

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an incorrect definition of the link before accessing a file. This allows a malicious user to write any files into the device’s file system.

The vulnerability of the Adobe Creative Cloud Desktop Application is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow a malicious actor to write arbitrary files to the device’s file system remotely...

The vulnerability of the Adobe Creative Cloud Desktop Application, related to insecure management of privileges, allows a malicious individual to escalate their privileges.

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and enhance their privileges remotely...

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an uncontrolled search path element, allowing a malicious actor to execute arbitrary code within the context of the current user.

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an uncontrolled search path element. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

Adobe Creative Cloud < 2.2 / 5.0 < 5.3 Arbitrary Code Execution (APSB20-68)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 2.2, 5.3. It is, therefore, affected by a vulnerability as referenced in the APSB20-68 advisory. - Adobe Creative Cloud Desktop Application version 5.2 and earlier and 2.1 and earlier for Windows is affected by a...

CVE-2020-24422

Adobe Creative Cloud Desktop Application version 5.2 and earlier and 2.1 and earlier for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that ...

CVE-2020-24422

Adobe Creative Cloud Desktop Application version 5.2 and earlier and 2.1 and earlier for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that ...

Design/Logic Flaw

Adobe Creative Cloud Desktop Application version 5.2 and earlier and 2.1 and earlier for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that ...

CVE-2020-24422 Uncontrolled Search Path in Creative Cloud Desktop Application

Adobe Creative Cloud Desktop Application version 5.2 and earlier and 2.1 and earlier for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that ...

CVE-2020-24422

Adobe Creative Cloud Desktop Application (Windows) 5.2 and earlier, and 2.1 and earlier, is affected by an uncontrolled search path vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. A patch is avail...

Vulnerability fixed in Adobe Creative Cloud

Adobe has fixed a vulnerability in Creative Cloud. The vulnerability allows a malicious party to execute arbitrary code execute arbitrary code under user privileges. Adobe has released updates to fix the vulnerability. More information can be found on the page below:...