CWE
20
Advisory Published
Updated
Advisory Published

CVE-2021-21069: Adobe Creative Cloud Improper Privilege Management Privilege Escalation Vulnerability

First published: Fri Mar 12 2021(Updated: )

Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction.

Credit: psirt@adobe.com

Affected SoftwareAffected VersionHow to fix
Adobe Creative Cloud
Adobe Creative Cloud<=5.3
macOS
Microsoft Windows Operating System

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2021-21069?

    CVE-2021-21069 is classified as a critical local privilege escalation vulnerability.

  • How do I fix CVE-2021-21069?

    To fix CVE-2021-21069, users should update the Adobe Creative Cloud Desktop Application to version 5.3 or later.

  • What systems are affected by CVE-2021-21069?

    CVE-2021-21069 specifically affects Adobe Creative Cloud Desktop Application version 5.3 and earlier.

  • Can CVE-2021-21069 be exploited without user interaction?

    Yes, exploitation of CVE-2021-21069 does not require user interaction.

  • What could an attacker achieve by exploiting CVE-2021-21069?

    An attacker exploiting CVE-2021-21069 could perform high privileged actions against the installer.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203