CVE-2021-21078: Adobe Creative Cloud Unquoted Service Path in CCXProcess
Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-21078?
CVE-2021-21078 is a vulnerability found in Adobe Creative Cloud Desktop Application version 5.3 and earlier, which allows an attacker to achieve arbitrary code execution in the process of the current user.
What is the severity of CVE-2021-21078?
The severity of CVE-2021-21078 is medium, with a severity value of 6.5.
How does CVE-2021-21078 affect Adobe Creative Cloud Desktop Application?
CVE-2021-21078 affects Adobe Creative Cloud Desktop Application version 5.3 and earlier by allowing an attacker to achieve arbitrary code execution in the process of the current user.
What is the affected software by CVE-2021-21078?
The affected software by CVE-2021-21078 is Adobe Creative Cloud Desktop Application version 5.3 and earlier.
Is Apple macOS or Microsoft Windows affected by CVE-2021-21078?
No, Apple macOS and Microsoft Windows are not affected by CVE-2021-21078.
How can I fix CVE-2021-21078?
To fix CVE-2021-21078, update Adobe Creative Cloud Desktop Application to the latest version.
Where can I find more information about CVE-2021-21078?
You can find more information about CVE-2021-21078 on the Adobe website: https://helpx.adobe.com/security/products/creative-cloud/apsb21-18.html