Input validation

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation vulnerability. Successful exploitation could lead to a security bypass...

CVE-2018-4873

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Unquoted Search Path vulnerability. Successful exploitation could lead to local privilege escalation...

CVE-2018-4991

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation vulnerability. Successful exploitation could lead to a security bypass...

CVE-2018-4873

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Unquoted Search Path vulnerability. Successful exploitation could lead to local privilege escalation...

CVE-2018-4873

CVE-2018-4873 affects Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier. The root cause is an unquoted search path, enabling local privilege escalation if exploited. Public sources describe this as an elevation of privilege vulnerability in Creative Cloud with potential impa...

CVE-2018-4991

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable improper certificate validation vulnerability (CVE-2018-4991) that could lead to a security bypass. Affected product: Creative Cloud Desktop. Root cause: improper certificate validation. Impact: security b...

CVE-2018-4992

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper input validation vulnerability. Successful exploitation could lead to local privilege escalation...

CVE-2018-4992

Adobe Creative Cloud Desktop Application 4.4.1.298 and earlier is vulnerable to an improper input validation flaw (CVE-2018-4992) that could lead to local privilege escalation; CVE-2018-4991 and CVE-2018-4873 are related issues noted in the APSB18-12 advisory. The OpenVAS/NVD entries corroborate ...

Adobe Creative Cloud Security Updates (APSB18-12) - Mac OS X

Adobe Creative cloud is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:creativecloud";...

Adobe Creative Cloud Desktop < 4.5.0.331 Multiple Vulnerabilities (APSB18-12)

The version of Adobe Creative Cloud Desktop installed on the remote Windows host is prior to 4.5.0.331. It is, therefore, affected by the multiple vulnerabilities as noted in the APSB18-12 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's...

Adobe Creative Cloud Security Updates (APSB18-12) - Windows

Adobe Creative cloud is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:creativecloud";...

Adobe Creative Cloud Elevation of Privilege Vulnerability

Adobe Creative Cloud is a cloud-based suite of software that includes graphic design, movie editing, and web development applications. An elevation of privilege vulnerability exists in Adobe Creative Cloud 4.4.1.298 and earlier versions. An attacker can exploit the vulnerability to elevate...

Adobe Creative Cloud elevation of privilege vulnerability (CNVD-2018-09211)

Adobe Creative Cloud is a cloud-based suite of software that includes graphic design, movie editing, and web development applications. An elevation of privilege vulnerability exists in Adobe Creative Cloud 4.4.1.298 and earlier versions. An attacker can exploit the vulnerability to gain elevation...

Adobe Creative Cloud Security Restriction Bypass Vulnerability

Adobe Creative Cloud is a cloud-based suite of software that includes graphic design, movie editing, and web development applications. A security restriction bypass vulnerability exists in Adobe Creative Cloud 4.4.1.298 and earlier versions. An attacker can exploit the vulnerability to bypass...

Adobe Patches Critical Bugs In Flash Player, Creative Cloud

Adobe has fixed several critical vulnerabilities – including a critical code execution bug in Adobe Flash Player – as part of its regularly scheduled May Security Bulletin, on Tuesday. In all, Adobe released patches for five critical and important vulnerabilities spanning Creative Cloud, Adobe...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe Connect, Adobe Flash Player, and Adobe Creative Cloud Desktop Application. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to revi...

APSB18-12 Security update available for Adobe Creative Cloud Desktop Application

Adobe has released a security update for the Creative Cloud Desktop Application for Windows and MacOS. This update resolves a vulnerability in the validation of certificates used by Creative Cloud desktop applications CVE-2018-4991, and an improper input validation vulnerability CVE-2018-4992 tha...

Vulnerability Spotlight: Multiple Vulnerabilities in CorelDRAW X8

Today, Talos is disclosing several vulnerabilities that have been identified in CorelDRAW X8. CorelDRAW X8 is graphics suite used for manipulating raster and vector images and is a common alternative to Adobe Creative Cloud. Several of the vulnerabilities being disclosed today specifically affect...

Adobe Creative Cloud Security Update (APSB17-13) - Windows

Adobe Creative Cloud is prone to a security bypass and a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

ColdFusion Hotfix Resolves XSS, Java Deserialization Bugs

Adobe today released an important security hotfix for several versions of its ColdFusion rapid web application development platform. The company said the update addresses an input validation vulnerability CVE-2017-3008 in the software that could be used in reflected cross-site scripting XSS...