CVE-2019-7093

CWE-427CWE-4263 documents3 sources
Severity
7.8HIGH
EPSS
1.1%
top 21.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Adobe Creative CloudAdobe Creative Cloud Desktop Application (installer)
Timeline
PublishedMay 24
Latest updateMay 24

Description

Creative Cloud Desktop Application (installer) versions 4.7.0.400 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDadobe/creative_cloud4.7.0.400

🔴Vulnerability Details

2
GHSA
GHSA-cggh-hrhw-p6gp: Creative Cloud Desktop Application (installer) versions 4↗2022-05-24
▶
CVEList
CVE-2019-7093: Creative Cloud Desktop Application (installer) versions 4↗2019-05-24
▶
CVE-2019-7093 (HIGH CVSS 7.8) | Creative Cloud Desktop Application | cvebase.io