CVE-2016-4157: High severity adobe creative cloud vulnerability
Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4157?
CVE-2016-4157 is considered to have a critical severity level due to its potential to allow local users to gain elevated privileges.
How do I mitigate CVE-2016-4157?
To mitigate CVE-2016-4157, upgrade the Adobe Creative Cloud Desktop Application to version 3.7.0.272 or later.
Who is affected by CVE-2016-4157?
CVE-2016-4157 affects users of Adobe Creative Cloud on Windows systems using versions before 3.7.0.272.
What are the potential impacts of CVE-2016-4157?
The potential impacts of CVE-2016-4157 include unauthorized privilege escalation and execution of arbitrary code.
Is there a workaround for CVE-2016-4157?
There are no official workarounds for CVE-2016-4157; the best practice is to update to the latest version.