Vulnerability · Published Sep 27, 2021 · Assigned by adobe
CVE-2021-28613Adobe Creative Cloud Arbitrary File Overwrite Vulnerability
High 7.4
In plain English
A high-severity security flaw in Creative Cloud (desktop component) from Adobe. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).
Severity (CVSS 3.1)7.4High
Exploit odds (30 days)0.5%top 57.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Adobe Creative Cloud Desktop Application version 5.4 (and earlier) is affected by a file handling vulnerability that could allow an attacker to arbitrarily overwrite a file. Exploitation of this issue requires local access, administrator privileges and user interaction.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Creative Cloud (desktop component) | unspecified – through 5.4unspecified – through None |
Weakness: CWE-379 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:H