VULNERABILITY INTELLIGENCE

CVE-2021-28581

CVSS score7.3 HIGH
EPSS probability0.86%
CISA KEVNot currently listed
Published2021-09-08
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

Adobe Creative Cloud Desktop 3.5 (and earlier) is affected by an uncontrolled search path vulnerability that could result in elevation of privileges. Exploitation of this issue requires user interaction in that a victim must log on to the attacker's local machine.

Weakness classification

  • psirt@adobe.com: CWE-427

Primary references