Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-15925
HistoryFeb 18, 2022 - 12:00 a.m.

Adobe Creative Cloud Desktop Uncontrolled Search Path Element Vulnerability

2022-02-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
16

0.001 Low

EPSS

Percentile

36.8%

Adobe Creative Cloud Desktop Application is a suite of applications from Adobe for managing applications and services in the Creative Cloud Member Management Center. The application supports synchronizing and sharing files, managing fonts, and accessing a library of assets for commercial photography and design.Adobe Creative Cloud Desktop 2.7.0.13 and earlier versions are vulnerable to uncontrolled search path elements. An attacker could exploit the vulnerability to execute arbitrary code (the victim user must download the malicious DLL file, which needs to be in the same folder as the installer, making it a highly sophisticated attack vector).

0.001 Low

EPSS

Percentile

36.8%