Lucene search

K
zdiJokubas ArsobaZDI-21-1333
HistoryNov 24, 2021 - 12:00 a.m.

Adobe Creative Cloud Incorrect Permission Assignment Privilege Escalation Vulnerability

2021-11-2400:00:00
Jokubas Arsoba
www.zerodayinitiative.com
13
adobe creative cloud
privilege escalation
vulnerability
incorrect permissions
folder
exploit
system context

EPSS

0.001

Percentile

51.1%

This vulnerability allows local attackers to escalate privileges on affected installations of Adobe Creative Cloud. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product installer. The issue results from incorrect permsissions set on a folder. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.

EPSS

0.001

Percentile

51.1%