PT-2019-6109

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions 4.7.0.400 and earlier Description The issue is related to an insecure library loading procedure, specifically a DLL hijacking vulnerability. This could allow a remote attacker to escalate their...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities affecting Adobe Flash Player, Acrobat and Reader, ColdFusion, and Creative Cloud Desktop Application. An attacker could exploit some of these vulnerabilities to take control of an affected system. The National Cybersecurity and...

APSB19-11 Security update available for the Adobe Creative Cloud Desktop Application

Adobe has released a security update for the Creative Cloud Desktop Application installer for Windows. This update resolves an insecure library loading vulnerability in the installer that could lead to privilege escalation...

SQL injection vulnerability in sh***.php page of website building system of Hainan Creative Future Culture Media Co.

Hainan Creative Future Culture Media Co., Ltd. is an excellent media enterprise engaged in brand one-stop service e-commerce advertising consulting services. There is a SQL injection vulnerability in the sh.php page of the website system of Hainan Creative Future Culture Media Co., Ltd. that can ...

creative-handmade.org XSS vulnerability

Open Bug Bounty ID: OBB-713723 Description| Value ---|--- Affected Website:| creative-handmade.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

September 2018 Patch Tuesday – 61 Vulns, FragmentSmack, Hyper-V Escape

In this month’s Patch Tuesday release there are 61 vulnerabilities patched with 17 Criticals. Out of the criticals, most are browser-related, with the rest including Windows, Hyper-V, and .net Framework. A vulnerability CVE-2018-8475 in Windows' image parsing has been publicly disclosed, in...

Adobe Creative Cloud Desktop < 4.6.1 Privilege Escalation Vulnerability (APSB18-32)

The version of Adobe Creative Cloud Desktop installed on the remote Windows host is prior to 4.6.1. It is, therefore, affected by a privilege escalation vulnerability as noted in the APSB18-32 advisory. Note that Nessus has not tested for these issues but has instead relied only on the...

CVE-2018-12829

Adobe Creative Cloud Desktop Application before 4.6.1 has an improper certificate validation vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2018-5003

Adobe Creative Cloud Desktop Application before 4.5.5.342 installer has an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2018-5003

Adobe Creative Cloud Desktop Application before 4.5.5.342 installer has an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2018-12829

Adobe Creative Cloud Desktop Application before 4.6.1 has an improper certificate validation vulnerability. Successful exploitation could lead to privilege escalation...

Input validation

Adobe Creative Cloud Desktop Application before 4.6.1 has an improper certificate validation vulnerability. Successful exploitation could lead to privilege escalation...

Privilege escalation

Adobe Creative Cloud Desktop Application before 4.5.5.342 installer has an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2018-12829

Adobe Creative Cloud Desktop Application before 4.6.1 has an improper certificate validation vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2018-5003

Adobe Creative Cloud Desktop Application before 4.5.5.342 installer has an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2018-5003

Adobe Creative Cloud Desktop Application installer (Windows) prior to version 4.5.5.342 is affected by an insecure library loading (DLL hijacking) vulnerability (CVE-2018-5003). The root cause is DLL loading during installation, enabling privilege escalation if an attacker can place a malicious l...

CVE-2018-12829

Adobe Creative Cloud Desktop Application prior to version 4.6.1 contains an improper certificate validation vulnerability that could lead to privilege escalation. Affected product: Adobe Creative Cloud Desktop Application (Windows/macOS) with 4.6.0 and earlier. Root cause: improper certificate va...

PT-2018-11422

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions prior to 4.6.1 Description The issue is related to improper certificate validation, which could lead to privilege escalation if successfully exploited. Recommendations For versions prior to...

Adobe Creative Cloud Desktop Application Elevation of Privilege Vulnerability

Adobe Creatie Cloud Desktop Application is a suite of applications for managing applications and services in the Creative Cloud Member Management Center from Adobe USA. The program supports synchronizing and sharing files, managing fonts, and accessing asset libraries for commercial photography a...

CVE-2018-12829: Improper Certificate Validation

Adobe Creative Cloud Desktop Application before 4.6.1 has an improper certificate validation vulnerability. Successful exploitation could lead to privilege escalation...