CVE-2025-54271CWE-367

CVE-2025-54271

Medium · published October 15, 2025

CVSS v3.1
5.6
EPSS
0%
Percentile
3.3
In the wild
Unconfirmed
What it is

Creative Cloud Desktop versions 6.7.0.278 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to arbitrary file system write. A low-privileged attacker could exploit the timing between the check and use of a resource, potentially allowing unauthorized modifications to files. Exploitation of this issue does not require user interaction.

The record
Technical detail
CVSS v3.1
5.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00143 · 3.3th percentile
Weakness
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition
Published
2025-10-15T21:15Z
Affected products (1)
ProductVersionsFixed in
adobe/creative_cloud< 6.8.0.8216.8.0.821
References (1)
EPSS history
Timeline
  • 15 OCT 16:21Z
    Creative Cloud Desktop | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
    cvelistv5