CVE-2024-34116: Adobe Creative Cloud App Install Arbitrary Folder Delete Vulnerability can be abuse to Privilege Escalation
Creative Cloud Desktop versions 6.1.0.587 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to load and execute malicious libraries, leading to arbitrary file delete. Exploitation of this issue requires user interaction.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-34116?
CVE-2024-34116 is classified as a security feature bypass vulnerability.
How do I fix CVE-2024-34116?
To address CVE-2024-34116, update Adobe Creative Cloud Desktop Application to version 6.2.0.554 or later.
What systems are affected by CVE-2024-34116?
CVE-2024-34116 affects Adobe Creative Cloud Desktop versions 6.1.0.587 and earlier.
What can an attacker do with CVE-2024-34116?
An attacker can exploit CVE-2024-34116 to load and execute malicious libraries, potentially leading to arbitrary file deletion.
When was CVE-2024-34116 disclosed?
CVE-2024-34116 was disclosed as a vulnerability in the Adobe Creative Cloud Desktop Application.