VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Mar 12, 2021· Updated Jun 17, 2026

CVE-2021-21078

CVE-2021-21078

Description

Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction

Affected products

3
  • Adobe Inc./Creative Cloud Desktop Application3 versions
    cpe:2.3:a:adobe:creative_cloud_desktop_application:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:adobe:creative_cloud_desktop_application:*:*:*:*:*:*:*:*range: <=5.3
    • (no CPE)range: <=5.3
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.