CVE-2021-21078
Adobe Creative Cloud Unquoted Service Path in CCXProcess
- State
- Published
- Severity
- 6.5 Medium
- Published
- Mar 12, 2021
- Updated
- Apr 23, 2025
- Reserved
- Dec 18, 2020
Description
Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 6.5 Medium | CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H | adobe |
Weaknesses
- CWE-426 Untrusted Search Path (CWE-426)
Affected Products
| Product | Versions |
|---|---|
Creative Cloud (desktop component)Adobe |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.