CVE-2025-54271: Creative Cloud Desktop | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
Creative Cloud Desktop versions 6.7.0.278 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to arbitrary file system write. A low-privileged attacker could exploit the timing between the check and use of a resource, potentially allowing unauthorized modifications to files. Exploitation of this issue does not require user interaction.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-54271?
CVE-2025-54271 is classified as a low-severity vulnerability that may allow arbitrary file system writes.
How do I fix CVE-2025-54271?
To fix CVE-2025-54271, update Adobe Creative Cloud Desktop to version 6.7.0.279 or later.
Who is affected by CVE-2025-54271?
CVE-2025-54271 affects users of Adobe Creative Cloud Desktop versions 6.7.0.278 and earlier.
What type of vulnerability is CVE-2025-54271?
CVE-2025-54271 is a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability.
Can a low-privileged attacker exploit CVE-2025-54271?
Yes, a low-privileged attacker can exploit CVE-2025-54271 to potentially gain unauthorized access to the file system.