CVE-2021-28581CWE-427
Adobe Creative Cloud Desktop uncontrolled search path element vulnerability could lead to local privilege escalation
High · published September 8, 2021
What it is
Adobe Creative Cloud Desktop 3.5 (and earlier) is affected by an uncontrolled search path vulnerability that could result in elevation of privileges. Exploitation of this issue requires user interaction in that a victim must log on to the attacker's local machine.
The record
Technical detail
- CVSS v3.0
- 7.3 · HIGH
- Vector
- CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00856 · 58.0th percentile
- Weakness
- CWE-427 · Uncontrolled Search Path Element
- Published
- 2021-09-08T13:29Z
EPSS history
Timeline