CVE-2021-21069: Adobe Creative Cloud Improper Privilege Management Privilege Escalation Vulnerability
Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Adobe Creative Cloud on Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Adobe privileged helper tool. The issue lies in the lack of proper validation of the helper clients. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-21069?
CVE-2021-21069 is classified as a critical local privilege escalation vulnerability.
How do I fix CVE-2021-21069?
To fix CVE-2021-21069, users should update the Adobe Creative Cloud Desktop Application to version 5.3 or later.
What systems are affected by CVE-2021-21069?
CVE-2021-21069 specifically affects Adobe Creative Cloud Desktop Application version 5.3 and earlier.
Can CVE-2021-21069 be exploited without user interaction?
Yes, exploitation of CVE-2021-21069 does not require user interaction.
What could an attacker achieve by exploiting CVE-2021-21069?
An attacker exploiting CVE-2021-21069 could perform high privileged actions against the installer.