CVE-2021-21069 — Improper Input Validation in Adobe Creative Cloud

CWE-20 — Improper Input Validation3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.9%
top 23.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Adobe Creative CloudAdobe Creative Cloud Desktop Application
Timeline
PublishedMar 12
Latest updateMay 24

Description

Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5adobe/creative_cloudunspecified — 5.3.1.470a+1

Patches

Patch: helpx.adobe.com ↗Patch: helpx.adobe.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-h3f9-x7c2-q5h9: Adobe Creative Cloud Desktop Application version 5↗2022-05-24
▶
CVEList
Adobe Creative Cloud Privilege Escalation Vulnerability↗2021-03-12
▶
CVE-2021-21069 — Improper Input Validation in Adobe | cvebase