CVE-2024-34116CWE-427

Adobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege Escalation

High · published June 13, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
21.4
In the wild
Unconfirmed
What it is

Creative Cloud Desktop versions 6.1.0.587 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to load and execute malicious libraries, leading to arbitrary file delete. Exploitation of this issue requires user interaction.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00298 · 21.4th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2024-06-13T11:26Z
EPSS history
Timeline
  • 13 JUN 11:26Z
    Adobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege Escalation
    cvelistv5