← CVE Intelligence

CVE-2021-28594

Creative Cloud Desktop installer Uncontrolled Search Path element could lead to arbitrary code execution PUBLISHED

Description (CNA)

Adobe Creative Cloud Desktop Application (installer) version 2.4 (and earlier) is affected by an Uncontrolled Search Path Element vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected (CNA)

Vendor / productVersions
Adobe / Preludeaffected unspecified through 2.4; affected unspecified through None

CWE

CWE-427

References

ADP enrichment

CVE

No English description supplied.