CVE-2020-9670

CWE-593 documents3 sources

Severity

9.8CRITICAL

EPSS

2.9%

top 13.74%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Adobe Creative Cloud Desktop Application Adobe Adobe Creative Cloud Desktop Application

Timeline

PublishedJul 17

Latest updateMay 24

Description

Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful exploitation could lead to privilege escalation.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶NVDadobe/creative_cloud_desktop_application5.1

▶CVEListV5adobe/adobe_creative_cloud_desktop_applicationversions 5.1 and earlier

🔴Vulnerability Details

GHSA

GHSA-f35f-35hv-6fqx: Adobe Creative Cloud Desktop Application versions 5↗2022-05-24

▶

CVEList

CVE-2020-9670: Adobe Creative Cloud Desktop Application versions 5↗2020-07-16

▶