PT-2021-6643 · Adobe · Adobe Creative Cloud Desktop Application

Name of the Vulnerable Software and Affected Versions: Adobe Creative Cloud Desktop Application version 2.4 and earlier Description: The issue is related to an insecure temporary file creation, which could allow an attacker to overwrite arbitrary files in the context of the current user...

How to Tell a Job Offer from an ID Theft Trap

One of the oldest scams around -- the fake job interview that seeks only to harvest your personal and financial data -- is on the rise, the FBI warns. Heres the story of a recent LinkedIn impersonation scam that led to more than 100 people getting duped, and one almost-victim who decided the job...

Vulnerabilities fixed in Adobe products

Adobe has fixed several vulnerabilities in After Effects, Creative Cloud, Illustrator, InDesign and Media Encoder. The vulnerabilities potentially allow a malicious party to launch attacks execute attacks that result in the following categories of damage: Remote code execution User rights. Access...

Adobe Creative Cloud Desktop < 5.4.3 Privilege Escalation (APSB21-31)

The version of Adobe Creative Cloud Desktop installed on the remote Windows host is prior to version 5.4.3. It is, therefore, affected by a privilege escalation vulnerability due to an uncontrolled search path element. Note that Nessus has not tested for this issue but has instead relied only on...

Alert: Hackers Exploit Adobe Reader 0-Day Vulnerability in the Wild

Adobe has released Patch Tuesday updates for the month of May with fixes for multiple vulnerabilities spanning 12 different products, including a zero-day flaw affecting Adobe Reader that's actively exploited in the wild. The list of updated applications includes Adobe Experience Manager, Adobe...

Adobe Creative Cloud Desktop Application 代码问题漏洞

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An uncontrolled search path element vulnerability exists in Adobe Creative Cloud Desktop Application 5.3 and earlier versions. An attacker can exploit the vulnerability to...

Adobe Creative Cloud Desktop Application Uncontrolled Search Path Element Vulnerability

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An uncontrolled search path element vulnerability exists in Adobe Creative Cloud Desktop Application 5.3 and earlier versions. An attacker can exploit the vulnerability to...

CVE-2021-28581

Adobe Creative Cloud Desktop 3.5 and earlier is affected by an uncontrolled search path vulnerability that could result in elevation of privileges. Exploitation of this issue requires user interaction in that a victim must log on to the attacker's local machine...

APSB21-31 Security update available for Adobe Creative Cloud Desktop Application

Adobe has released an update for the Creative Cloud Desktop Application for Windows. This update includes a fix for a critical vulnerability that could lead to arbitrary code execution in the context of current user...

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app, related to incorrect handling of the search path, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to improper handling of the search path. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the graphic editor application for Adobe Creative Cloud Desktop Application lies in insufficient validation of input data, which allows a malicious individual to escalate their privileges.

The vulnerability of the Adobe Creative Cloud Desktop Application is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Adobe Creative Cloud Desktop Application, related to the creation of temporary files with insecure resolutions, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Creative Cloud Desktop Application is related to the creation of temporary files with insecure resolutions. Exploiting this vulnerability could allow a hacker to execute arbitrary code...

Command Execution Vulnerability in FastAdmin of Shenzhen Extreme Creative Technology Co.

FastAdmin is an extremely fast backend development framework based on ThinkPHP5+Bootstrap. Shenzhen Extreme Creative Technology Co. FastAdmin has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Adobe Creative Cloud Improper Privilege Management Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Adobe Creative Cloud on Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

CVE-2021-21078

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction...

CVE-2021-21078

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction...

CVE-2021-21069

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction...

CVE-2021-21069

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction...

CVE-2021-21068

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a file handling vulnerability that could allow an attacker to cause arbitrary file overwriting. Exploitation of this issue requires physical access and user interaction...

CVE-2021-21068

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a file handling vulnerability that could allow an attacker to cause arbitrary file overwriting. Exploitation of this issue requires physical access and user interaction...