Skip to content
OpenAdvisories
High · 7.8 CVE-2021-43019 EUVD-2021-29973GHSA-wxwj-m72v-qhcr

Adobe Creative Cloud Incorrect Permission Assignment Privilege Escalation Vulnerability

Published Nov 23, 2021 · Updated Apr 23, 2025 · Assigned by adobe

Description

Adobe Creative Cloud version 5.5 (and earlier) are affected by a privilege escalation vulnerability in the resources leveraged by the Setup.exe service. An unauthenticated attacker could leverage this vulnerability to remove files and escalate privileges under the context of SYSTEM . An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability on the product installer. User interaction is required before product installation to abuse this vulnerability.

Affected products

VendorProductAffectedFixed
Adobe Creative Cloud (desktop component) unspecified – ≤ 5.5, unspecified – ≤ None —

References