Creative Cloud
Approved changes feed: RSS · Atom
cpe:2.3:a:adobe:creative_cloud:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Adobe (fb293c1b-cab3-5565-9184-186e4ece530b) |
|---|---|
| Product | Creative Cloud (76b3dee9-1aed-52c5-a558-001135313a95) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-64896 |
vulnerable | 2026-06-08 07:39:20.350558 |
Creative Cloud Desktop | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)
MEDIUM (5.5)
Creative Cloud Desktop versions 6.4.0.361 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to disrupt the application's functionality by manipulating temporary files. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2025-12-09T20:39:50.648Z
Updated: 2025-12-09T20:56:43.309Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54271 |
vulnerable | 2026-06-08 07:33:12.287327 |
Creative Cloud Desktop | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
MEDIUM (5.6)
Creative Cloud Desktop versions 6.7.0.278 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to arbitrary file system write. A low-privileged attacker could exploit the timing between the check and use of a resource, potentially allowing unauthorized modifications to files. Exploitation of this issue does not require user interaction.
Published: 2025-10-15T16:21:12.251Z
Updated: 2025-10-15T16:55:45.119Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26358 |
vulnerable | 2026-06-08 05:57:39.451818 |
Adobe Creative Cloud AdobeExtensionService.exe local privilege escalation vulnerability
HIGH (8.6)
Creative Cloud version 5.9.1 (and earlier) is affected by an Untrusted Search Path vulnerability that might allow attackers to execute their own programs, access unauthorized data files, or modify configuration in unexpected ways. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted application would then execute. The problem extends to any type of critical resource that the application trusts.
Published: 2023-03-22T00:00:00.000Z
Updated: 2024-08-02T11:46:24.504Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28581 |
vulnerable | 2026-06-08 05:31:24.594384 |
Adobe Creative Cloud Desktop uncontrolled search path element vulnerability could lead to local privilege escalation
HIGH (7.3)
Adobe Creative Cloud Desktop 3.5 (and earlier) is affected by an uncontrolled search path vulnerability that could result in elevation of privileges. Exploitation of this issue requires user interaction in that a victim must log on to the attacker's local machine.
Published: 2021-09-08T13:29:24.534Z
Updated: 2024-09-17T03:14:33.027Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-9669 |
vulnerable | 2026-06-08 05:28:02.545597 |
Details available
Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a lack of exploit mitigations vulnerability. Successful exploitation could lead to privilege escalation.
Published: 2020-07-16T23:59:50.000Z
Updated: 2024-08-04T10:34:39.929Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3808 |
vulnerable | 2026-06-08 05:25:57.747550 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8236 |
vulnerable | 2026-06-08 05:14:23.739877 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8063 |
vulnerable | 2026-06-08 05:14:15.021283 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7959 |
vulnerable | 2026-06-08 05:14:14.900349 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7958 |
vulnerable | 2026-06-08 05:14:14.899984 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7957 |
vulnerable | 2026-06-08 05:14:14.899550 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7093 |
vulnerable | 2026-06-08 05:14:13.821621 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5003 |
vulnerable | 2026-06-08 05:11:50.095649 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4992 |
vulnerable | 2026-06-08 05:11:50.076445 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4991 |
vulnerable | 2026-06-08 05:11:50.076097 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4873 |
vulnerable | 2026-06-08 05:11:49.857676 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12829 |
vulnerable | 2026-06-08 05:10:42.023892 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-3007 |
vulnerable | 2026-06-08 05:09:26.273936 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-3006 |
vulnerable | 2026-06-08 05:09:26.273284 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6935 |
vulnerable | 2026-06-08 05:08:11.458957 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4158 |
vulnerable | 2026-06-08 05:07:46.875218 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4157 |
vulnerable | 2026-06-08 05:07:46.874752 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1034 |
vulnerable | 2026-06-08 05:07:26.379014 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.