Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:creative_cloud_desktop:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductCreative Cloud Desktop (080b6c50-eafd-5723-a122-afaa56c6ffc1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-48344 vulnerable 2026-07-29 00:55:01.335677 GoCart | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
HIGH (7.8)
Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.
Published: 2026-07-14T20:21:15.537Z
Updated: 2026-07-15T10:34:54.284Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48272 vulnerable 2026-07-29 00:55:01.228935 Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)
HIGH (7.8)
Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction. Scope is changed.
Published: 2026-07-14T20:21:16.239Z
Updated: 2026-07-15T10:35:08.685Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64896 vulnerable 2026-06-08 07:39:20.349619 Creative Cloud Desktop | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)
MEDIUM (5.5)
Creative Cloud Desktop versions 6.4.0.361 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to disrupt the application's functionality by manipulating temporary files. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2025-12-09T20:39:50.648Z
Updated: 2025-12-09T20:56:43.309Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54271 vulnerable 2026-06-08 07:33:12.286380 Creative Cloud Desktop | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
MEDIUM (5.6)
Creative Cloud Desktop versions 6.7.0.278 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to arbitrary file system write. A low-privileged attacker could exploit the timing between the check and use of a resource, potentially allowing unauthorized modifications to files. Exploitation of this issue does not require user interaction.
Published: 2025-10-15T16:21:12.251Z
Updated: 2025-10-15T16:55:45.119Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34116 vulnerable 2026-06-08 06:37:32.920865 Adobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege Escalation
HIGH (7.1)
Creative Cloud Desktop versions 6.1.0.587 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to load and execute malicious libraries, leading to arbitrary file delete. Exploitation of this issue requires user interaction.
Published: 2024-06-13T11:26:35.460Z
Updated: 2024-08-07T14:55:12.015Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.