Vulnerability · Published Dec 9, 2025 · Assigned by adobe
CVE-2025-64896Creative Cloud Desktop | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)
Medium 5.5
In plain English
A medium-severity security flaw in Creative Cloud Desktop from Adobe. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).
Official description
Creative Cloud Desktop versions 6.4.0.361 and earlier are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to disrupt the application's functionality by manipulating temporary files. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Creative Cloud Desktop | 0 – through 6.4.0.361 |
Weakness: CWE-379 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H