Skip to content
OpenAdvisories
Medium · 6.5 CVE-2021-21078 EUVD-2021-8469GHSA-m37j-xrjp-4fj2

Adobe Creative Cloud Unquoted Service Path in CCXProcess

Published Mar 12, 2021 · Updated Apr 23, 2025 · Assigned by adobe

Description

Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction

Affected products

VendorProductAffectedFixed
Adobe Creative Cloud (desktop component) unspecified – ≤ 5.3, unspecified – ≤ None —

References