CVEvulnerability
CVE-2021-21069
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-03-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction.
Affected configurations
• adobe creative cloud desktop application (<= 5.3)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://helpx.adobe.com/security/products/creative-cloud/apsb21-18.html Patch, Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-21-281/ Third Party Advisory
- https://helpx.adobe.com/security/products/creative-cloud/apsb21-18.html Patch, Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-21-281/ Third Party Advisory