Adobe Creative_cloud
24 CVEs affecting Adobe Creative_cloud. Latest disclosed: 2025-12-09. Critical: 7, High: 14.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-9669 | Critical | 9.8 | 2020-07-17 | Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a lack of exploit mitigations vulnerability. Successful exploitation could lead to privi… |
CVE-2019-8236 | Critical | 9.8 | 2019-10-23 | Creative Cloud Desktop Application version 4.6.1 and earlier versions have Security Bypass vulnerability. Successful exploitation could lead to Privilege Escal… |
CVE-2019-7959 | Critical | 9.8 | 2019-08-16 | Creative Cloud Desktop Application versions 4.6.1 and earlier have a using components with known vulnerabilities vulnerability. Successful exploitation could l… |
CVE-2019-7958 | Critical | 9.8 | 2019-08-16 | Creative Cloud Desktop Application versions 4.6.1 and earlier have an insecure inherited permissions vulnerability. Successful exploitation could lead to privi… |
CVE-2018-12829 | Critical | 9.8 | 2018-08-29 | Adobe Creative Cloud Desktop Application before 4.6.1 has an improper certificate validation vulnerability. Successful exploitation could lead to privilege esc… |
CVE-2018-4991 | Critical | 9.8 | 2018-05-19 | Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation vulnerability. Successful exploitat… |
CVE-2016-1034 | Critical | 9.1 | 2016-04-12 | The Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud Desktop Application before 3.6.0.244 allows remote attackers to rea… |
CVE-2017-3006 | High | 8.8 | 2017-04-12 | Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource permissions during the installation of Creative Cloud de… |
CVE-2023-26358 | High | 8.6 | 2023-03-22 | Creative Cloud version 5.9.1 (and earlier) is affected by an Untrusted Search Path vulnerability that might allow attackers to execute their own programs, acce… |
CVE-2019-7093 | High | 7.8 | 2019-05-24 | Creative Cloud Desktop Application (installer) versions 4.7.0.400 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploi… |
CVE-2018-5003 | High | 7.8 | 2018-08-29 | Adobe Creative Cloud Desktop Application before 4.5.5.342 (installer) has an insecure library loading (dll hijacking) vulnerability. Successful exploitation co… |
CVE-2018-4992 | High | 7.8 | 2018-05-19 | Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper input validation vulnerability. Successful exploitation co… |
CVE-2018-4873 | High | 7.8 | 2018-05-19 | Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Unquoted Search Path vulnerability. Successful exploitation could l… |
CVE-2017-3007 | High | 7.8 | 2017-04-12 | Adobe Thor versions 3.9.5.353 and earlier have a vulnerability in the directory search path used to find resources, related to Creative Cloud desktop applicati… |
CVE-2016-6935 | High | 7.8 | 2016-10-13 | Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.8.0.310 on Windows allows local users to gain privileges via a… |
CVE-2019-8063 | High | 7.5 | 2019-08-16 | Creative Cloud Desktop Application 4.6.1 and earlier versions have an insecure transmission of sensitive data vulnerability. Successful exploitation could lead… |
CVE-2019-7957 | High | 7.5 | 2019-08-16 | Creative Cloud Desktop Application versions 4.6.1 and earlier have a security bypass vulnerability. Successful exploitation could lead to denial of service. |
CVE-2021-28581 | High | 7.3 | 2021-09-08 | Adobe Creative Cloud Desktop 3.5 (and earlier) is affected by an uncontrolled search path vulnerability that could result in elevation of privileges. Exploitat… |
CVE-2016-4158 | High | 7.3 | 2016-06-16 | Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a… |
CVE-2016-4157 | High | 7.3 | 2016-06-16 | Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privile… |