CVE-2021-21078

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction...

CVE-2021-21069

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction...

Privilege escalation

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction...

Design/Logic Flaw

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction...

CVE-2021-21078

Summary (CVE-2021-21078) : Adobe Creative Cloud Desktop Application versions 5.3 and earlier are affected by an Unquoted Service Path in CCXProcess that could enable arbitrary code execution in the current user’s process. Exploitation requires user interaction. The issue is documented in the APSB...

CVE-2021-21068

Adobe Creative Cloud Desktop Application (Windows/macOS) 5.3 and earlier is affected by a file-handling vulnerability that can lead to arbitrary file overwriting. Exploitation requires physical access and user interaction (local/physical vector). Multiple sources indicate broader impact that coul...

CVE-2021-21069

CVE-2021-21069 pertains to Adobe Creative Cloud Desktop Application 5.3 and earlier, where a local privilege escalation could let an attacker call installer functions to perform high-privilege actions. Exploitation reportedly requires no user interaction. Affected product details are confirmed ac...

CVE-2021-21068: Creation of Temporary File in Directory with Insecure Permissions

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a file handling vulnerability that could allow an attacker to cause arbitrary file overwriting. Exploitation of this issue requires physical access and user interaction...

CVE-2021-21069: Improper Input Validation

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction...

CVE-2021-21078: Untrusted Search Path

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction...

Adobe Creative Cloud Desktop Application code-related vulnerabilities

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. A command injection vulnerability exists in Adobe Creative Cloud Desktop Application 5.3 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary...

Adobe Creative Cloud Desktop Application Security Vulnerabilities

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An arbitrary file overwrite vulnerability exists in Adobe Creative Cloud Desktop Application 5.3 and earlier versions. An attacker can exploit this vulnerability to execute...

Adobe Creative Cloud Desktop Application: Input validation error vulnerability

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An improper input validation vulnerability exists in Adobe Creative Cloud Desktop Application 5.3 and earlier versions. An attacker could exploit the vulnerability to elevate...

PT-2021-2517

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions 5.3 and earlier Description The issue is related to the creation of temporary files with insecure permissions in the Adobe Creative Cloud Desktop Application. Exploitation of this issue could...

PT-2021-2521

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions 5.3 and earlier Description The issue is related to insufficient input validation in the Adobe Creative Cloud Desktop Application, which can lead to a local privilege escalation. This allows an...

APSB21-18 Security update available for Adobe Creative Cloud Desktop Application

Adobe has released a security update for the Creative Cloud Desktop Application. This update resolves multiple critical vulnerabilities that could lead to arbitrary code execution in the context of current user...

PT-2021-2520

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application version 5.3 and earlier Description The issue is related to an Unquoted Service Path vulnerability in CCXProcess, which could allow an attacker to achieve arbitrary code execution in the process of the...

Zulip Desktop License Issue Vulnerability

Zulip Desktop is a desktop version of the team chat application from Zulip USA. An authorization issue vulnerability exists in versions prior to Zulip Desktop 5.0.0, which stems from allowing an attacker to record from a webcam and microphone because of an unprivileged request processor...

Adobe Creative Cloud Desktop Application Graphic Editor File Write

The vulnerability of the Adobe Creative Cloud Desktop Application is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow a malicious actor to write arbitrary files to the device’s file system remotely...

Drag and then drop files between a Citrix session and a local endpoint

Citrix now supports Dragging and then dropping files between a Citrix session and a local endpoint. You can drag and then drop files, groups of files, directories, groups of directories, or a combination of files and directories to and from the same client on the session. This ability applies to ...