CVE-2025-64896

published 2025-12-09

CVE-2025-64896: Creative Cloud Desktop versions 6.4.0.361 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that…

medium 5.5 CVSS 3.1

AV L AC L PR N UI R S U C N I N A H

Creative Cloud Desktop versions 6.4.0.361 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to disrupt the application's functionality by manipulating temporary files. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
adobe	creative_cloud	< 6.8.0.821	6.8.0.821
adobe	creative_cloud_desktop	<= 6.4.0.361	—

CWE-379