Skip to content
OpenAdvisories
High · 7.1 CVE-2024-34116 EUVD-2024-34637GHSA-v865-6qv6-w5m2

Adobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege Escalation

Published Jun 13, 2024 · Updated Aug 7, 2024 · Assigned by adobe

Description

Creative Cloud Desktop versions 6.1.0.587 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to load and execute malicious libraries, leading to arbitrary file delete. Exploitation of this issue requires user interaction.

Affected products

VendorProductAffectedFixed
Adobe Creative Cloud Desktop ≤ 6.1.0.587 —

Advisories 2

References