CVE-2019-7959

CWE-20 — Improper Input Validation3 documents3 sources

Severity

9.8CRITICAL

EPSS

17.7%

top 4.88%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Adobe Creative Cloud Adobe Creative Cloud Desktop Application

Timeline

PublishedAug 16

Latest updateMay 24

Description

Creative Cloud Desktop Application versions 4.6.1 and earlier have a using components with known vulnerabilities vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5adobe/creative_cloud_desktop_applicationCreative Cloud Desktop Application versions

▶NVDadobe/creative_cloud4.6.1

Patches

Patch: helpx.adobe.com ↗Patch: helpx.adobe.com ↗

🔴Vulnerability Details

GHSA

GHSA-x9p5-2fv7-hqrm: Creative Cloud Desktop Application versions 4↗2022-05-24

▶

CVEList

CVE-2019-7959: Creative Cloud Desktop Application versions 4↗2019-08-16

▶