CVE-2021-21078: Adobe Creative Cloud Unquoted Service Path in CCXProcess
First published: Fri Mar 12 2021(Updated: )
Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Creative Cloud Desktop Application | <=5.3 | |
| Apple macOS | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2021-21078?
CVE-2021-21078 is a vulnerability found in Adobe Creative Cloud Desktop Application version 5.3 and earlier, which allows an attacker to achieve arbitrary code execution in the process of the current user.
What is the severity of CVE-2021-21078?
The severity of CVE-2021-21078 is medium, with a severity value of 6.5.
How does CVE-2021-21078 affect Adobe Creative Cloud Desktop Application?
CVE-2021-21078 affects Adobe Creative Cloud Desktop Application version 5.3 and earlier by allowing an attacker to achieve arbitrary code execution in the process of the current user.
What is the affected software by CVE-2021-21078?
The affected software by CVE-2021-21078 is Adobe Creative Cloud Desktop Application version 5.3 and earlier.
Is Apple macOS or Microsoft Windows affected by CVE-2021-21078?
No, Apple macOS and Microsoft Windows are not affected by CVE-2021-21078.
How can I fix CVE-2021-21078?
To fix CVE-2021-21078, update Adobe Creative Cloud Desktop Application to the latest version.
Where can I find more information about CVE-2021-21078?
You can find more information about CVE-2021-21078 on the Adobe website: https://helpx.adobe.com/security/products/creative-cloud/apsb21-18.html
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/author
- agent/title
- agent/last-modified-date
- agent/references
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- vendor/adobe
- canonical/adobe creative cloud desktop application
- version/adobe creative cloud desktop application/5.3
- vendor/apple
- canonical/apple macos
- vendor/microsoft
- canonical/microsoft windows