CVE-2021-28581

Adobe Creative Cloud Desktop 3.5 (and earlier) is affected by an uncontrolled search path vulnerability that could result in elevation of privileges. Exploitation of this issue requires user interaction in that a victim must log on to the attacker's local machine.

Score

CVSS 3.0 7.3 High

Status

Modified - psirt@adobe.com

Published

2021-09-08

Last modified

2024-09-17

Weaknesses

CWE-427

Affected products

• Creative Cloud (Adobe)
• Creative Cloud Desktop Component (Adobe)

References

• https://helpx.adobe.com/security/products/creative-cloud/apsb21-31.html