Adobe Creative Cloud AdobeExtensionService.exe local privilege escalation vulnerability

CVE-2023-26358

Summary

The Adobe Creative Cloud application is susceptible to an Untrusted Search Path vulnerability, which could allow attackers to execute malicious programs by manipulating the search path for critical resources. An attacker could direct the application to execute their own files instead of the legitimate ones, potentially leading to unauthorized access to sensitive information or modifications of critical application configurations. This issue poses significant risks to users as it affects the integrity and security of the software's environment.

References