Adobe Creative Cloud Desktop uncontrolled search path element vulnerability could lead to local privilege escalation
CVE-2021-28581

7.3HIGH

Key Information:

Vendor
Adobe
Status
Creative Cloud (desktop Component)
Vendor
CVE Published:
8 September 2021

Summary

Adobe Creative Cloud Desktop 3.5 (and earlier) is affected by an uncontrolled search path vulnerability that could result in elevation of privileges. Exploitation of this issue requires user interaction in that a victim must log on to the attacker's local machine.

Affected Version(s)

Creative Cloud (desktop component) <= 5.3

Creative Cloud (desktop component) <= unspecified

References

https://helpx.adobe.com/security/products/creative-cloud/...
x_refsource_MISC

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.