Adobe Creative Cloud vulnerabilities
32 known vulnerabilities affecting adobe/creative_cloud.
Total CVEs
32
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL7HIGH19MEDIUM6
Vulnerabilities
Page 2 of 2
CVE-2019-7093HIGHCVSS 7.8≤ 4.7.0.4002019-05-24
CVE-2019-7093 [HIGH] CWE-427 CVE-2019-7093: Creative Cloud Desktop Application (installer) versions 4.7.0.400 and earlier have an insecure libra
Creative Cloud Desktop Application (installer) versions 4.7.0.400 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.
nvd
CVE-2018-12829CRITICALCVSS 9.8fixed in 4.6.12018-08-29
CVE-2018-12829 [CRITICAL] CWE-295 CVE-2018-12829: Adobe Creative Cloud Desktop Application before 4.6.1 has an improper certificate validation vulnera
Adobe Creative Cloud Desktop Application before 4.6.1 has an improper certificate validation vulnerability. Successful exploitation could lead to privilege escalation.
nvd
CVE-2018-5003HIGHCVSS 7.8fixed in 4.5.5.3422018-08-29
CVE-2018-5003 [HIGH] CWE-426 CVE-2018-5003: Adobe Creative Cloud Desktop Application before 4.5.5.342 (installer) has an insecure library loadin
Adobe Creative Cloud Desktop Application before 4.5.5.342 (installer) has an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.
nvd
CVE-2018-4991CRITICALCVSS 9.8≤ 4.4.1.2982018-05-19
CVE-2018-4991 [CRITICAL] CWE-295 CVE-2018-4991: Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper
Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation vulnerability. Successful exploitation could lead to a security bypass.
nvd
CVE-2018-4873HIGHCVSS 7.8≤ 4.4.1.2982018-05-19
CVE-2018-4873 [HIGH] CWE-428 CVE-2018-4873: Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Unquoted
Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Unquoted Search Path vulnerability. Successful exploitation could lead to local privilege escalation.
nvd
CVE-2018-4992HIGHCVSS 7.8≤ 4.4.1.2982018-05-19
CVE-2018-4992 [HIGH] CWE-20 CVE-2018-4992: Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper
Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper input validation vulnerability. Successful exploitation could lead to local privilege escalation.
nvd
CVE-2017-3007HIGHCVSS 7.8≤ 3.9.5.3532017-04-12
CVE-2017-3007 [HIGH] CWE-426 CVE-2017-3007: Adobe Thor versions 3.9.5.353 and earlier have a vulnerability in the directory search path used to
Adobe Thor versions 3.9.5.353 and earlier have a vulnerability in the directory search path used to find resources, related to Creative Cloud desktop applications.
nvd
CVE-2017-3006HIGHCVSS 8.8PoC≤ 3.9.5.3532017-04-12
CVE-2017-3006 [HIGH] CWE-732 CVE-2017-3006: Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resour
Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource permissions during the installation of Creative Cloud desktop applications.
nvd
CVE-2016-6935HIGHCVSS 7.8≤ 3.7.0.2722016-10-13
CVE-2016-6935 [HIGH] CWE-428 CVE-2016-6935: Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.8.0.
Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.8.0.310 on Windows allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.
nvd
CVE-2016-4158HIGHCVSS 7.3≤ 3.6.0.2482016-06-16
CVE-2016-4158 [HIGH] CWE-264 CVE-2016-4158: Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.
Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory.
nvd
CVE-2016-4157HIGHCVSS 7.3≤ 3.6.0.2482016-06-16
CVE-2016-4157 [HIGH] CWE-264 CVE-2016-4157: Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application bef
Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory.
nvd
CVE-2016-1034CRITICALCVSS 9.1≤ 3.5.1.2092016-04-12
CVE-2016-1034 [CRITICAL] CVE-2016-1034: The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop
The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before 3.6.0.244 allows remote attackers to read or write to arbitrary files via unspecified vectors.
nvd
← Previous2 / 2