VULNERABILITY INTELLIGENCE

CVE-2021-21078

CVSS score6.5 MEDIUM
EPSS probability1.08%
CISA KEVNot currently listed
Published2021-03-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Description

Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction

Weakness classification

  • psirt@adobe.com: CWE-426

Primary references