Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context…
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Adobe
- Product
- Creative Cloud Desktop Application
- CVSS v3.1
- 7.3 AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- Weakness
- CWE-427
- NVD status
- Received
Why it ranks 12 (Routine)
- CVSS v3.1 7.3 high
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.