CVE-2021-21069CWE-20

Adobe Creative Cloud Privilege Escalation Vulnerability

High · published March 12, 2021

CVSS v3.0
7.8
EPSS
3%
Percentile
85.4
In the wild
Unconfirmed
What it is

Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction.

The record
Technical detail
CVSS v3.0
7.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02636 · 85.4th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-03-12T18:11Z
EPSS history
Timeline
  • 12 MAR 18:11Z
    Adobe Creative Cloud Privilege Escalation Vulnerability
    cvelistv5