CVE-2022-23202

CVE-2022-23202 affects Adobe Creative Cloud Desktop 2.7.0.13 and earlier. The issue is an Uncontrolled Search Path Element that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must download a malicious DLL and place it in...

CVE-2024-34116

Adobe Creative Cloud Desktop (Windows/macOS) versions 6.1.0.587 and earlier are affected by an Uncontrolled Search Path Element vulnerability that can allow loading and executing malicious libraries, potentially resulting in arbitrary file deletion and a security feature bypass. Exploitation requ...

CVE-2021-21069

CVE-2021-21069 pertains to Adobe Creative Cloud Desktop Application 5.3 and earlier, where a local privilege escalation could let an attacker call installer functions to perform high-privilege actions. Exploitation reportedly requires no user interaction. Affected product details are confirmed ac...

CVE-2020-9682

CVE-2020-9682 affects Adobe Creative Cloud Desktop Application versions 5.1 and earlier. The issue is a symlink vulnerability that could allow arbitrary file-system write. The vulnerability is documented across multiple sources (NVD entry and vendor advisories) with high/severe impact. Remediatio...

CVE-2021-21078

Summary (CVE-2021-21078) : Adobe Creative Cloud Desktop Application versions 5.3 and earlier are affected by an Unquoted Service Path in CCXProcess that could enable arbitrary code execution in the current user’s process. Exploitation requires user interaction. The issue is documented in the APSB...

CVE-2020-9670

CVE-2020-9670 concerns the Adobe Creative Cloud Desktop Application, affected in versions 5.1 and earlier. The connected documents confirm a symlink vulnerability in this product/component that could allow privilege escalation if exploited. The risk is framed in multiple sources as part of APSB20...

CVE-2021-21068

Adobe Creative Cloud Desktop Application (Windows/macOS) 5.3 and earlier is affected by a file-handling vulnerability that can lead to arbitrary file overwriting. Exploitation requires physical access and user interaction (local/physical vector). Multiple sources indicate broader impact that coul...

CVE-2020-9671

Adobe Creative Cloud Desktop Application versions 5.1 and earlier contain an insecure file permissions vulnerability (CVE-2020-9671). Exploitation could lead to privilege escalation. Affected product: Adobe Creative Cloud Desktop; root cause: insecure file permissions. Public references in the se...

CVE-2021-28613

Adobe Creative Cloud Desktop Application

CVE-2021-43017

Summary (CVE-2021-43017) Adobe Creative Cloud Desktop installer prior to v5.6 is affected by an application DoS vulnerability. An authenticated attacker with root privileges could cause a denial of service by placing a malicious file on the victim’s local machine, with user interaction required b...

CVE-2021-28594

The CVE-2021-28594 entry concerns Adobe Creative Cloud Desktop Application installer (2.4 and earlier). The vulnerability is an Uncontrolled Search Path Element in the installer, allowing arbitrary code execution in the current user context. Exploitation requires user interaction (victim opens a ...

CVE-2021-43019

Adobe Creative Cloud Desktop/Application installers prior to 5.6 are affected by a local privilege-escalation due to incorrect permissions on resources used by the Setup.exe service. An unauthenticated attacker who can run low-privileged code and has user interaction can escalate to SYSTEM and re...

CVE-2021-28547

Adobe Creative Cloud Desktop for macOS 5.3 and earlier is affected by a local privilege‑escalation vulnerability that could allow a normal user to delete the OOBE directory and gain permissions to directories under administrator authority. Affected component is the installer/OOBE handling; root c...

CVE-2021-28633

Adobe Creative Cloud Desktop Application installer version 2.4 and earlier is affected by an Insecure temporary file creation vulnerability that can lead to arbitrary file overwriting in the user context. Exploitation requires physical interaction. Remediation per APSB21-41 is to update to a newe...