CVE-2020-9667CWE-427
Uncontrolled Search Path Element in AGSService.exe
Medium · published April 16, 2021
What it is
Adobe Genuine Service version 6.6 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An authenticated attacker with admin privileges could plant custom binaries and execute them with System permissions. Exploitation of this issue requires user interaction.
The record
Technical detail
- CVSS v3.1
- 6.5 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00488 · 41.1th percentile
- Weakness
- CWE-427 · Uncontrolled Search Path Element
- Published
- 2021-04-16T17:10Z
EPSS history
Timeline