Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2021-43019

Adobe Creative Cloud Incorrect Permission Assignment Privilege Escalation Vulnerability

Description

Adobe Creative Cloud version 5.5 (and earlier) are affected by a privilege escalation vulnerability in the resources leveraged by the Setup.exe service. An unauthenticated attacker could leverage this vulnerability to remove files and escalate privileges under the context of SYSTEM . An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability on the product installer. User interaction is required before product installation to abuse this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Creative Cloud (desktop component)

  • unspecified to ≤ 5.5affected
  • unspecified to ≤ Noneaffected

References