CVE-2021-28581CWE-427

Adobe Creative Cloud Desktop uncontrolled search path element vulnerability could lead to local privilege escalation

High · published September 8, 2021

CVSS v3.0
7.3
EPSS
1%
Percentile
58.0
In the wild
Unconfirmed
What it is

Adobe Creative Cloud Desktop 3.5 (and earlier) is affected by an uncontrolled search path vulnerability that could result in elevation of privileges. Exploitation of this issue requires user interaction in that a victim must log on to the attacker's local machine.

The record
Technical detail
CVSS v3.0
7.3 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00856 · 58.0th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2021-09-08T13:29Z
EPSS history
Timeline
  • 08 SEP 13:29Z
    Adobe Creative Cloud Desktop uncontrolled search path element vulnerability could lead to local privilege escalation
    cvelistv5