CVE-2018-4873

CWE-4283 documents3 sources
Severity
7.8HIGH
EPSS
0.4%
top 40.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Creative Cloud
Timeline
PublishedMay 19
Latest updateMay 14

Description

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Unquoted Search Path vulnerability. Successful exploitation could lead to local privilege escalation.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5creative_cloud_desktop_application_4.4.1.298_and_earlier_versionsCreative Cloud Desktop Application 4.4.1.298 and earlier versions
▶NVDadobe/creative_cloud4.4.1.298

🔴Vulnerability Details

2
GHSA
GHSA-x8qr-mc64-66wh: Adobe Creative Cloud Desktop Application versions 4↗2022-05-14
▶
CVEList
CVE-2018-4873: Adobe Creative Cloud Desktop Application versions 4↗2018-05-19
▶
CVE-2018-4873 (HIGH CVSS 7.8) | Adobe Creative Cloud Desktop Applic | cvebase.io