Known vulnerabilities in Creative Cloud Desktop Application

Vendor: Adobe
Software CPE: cpe:2.3:a:adobe:creative_cloud_desktop_application:*:*:*:*:*:*:*:*
Total vulnerabilities: 35
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Creative Cloud Desktop Application Creative Cloud Desktop Application is affected by 35 known vulnerabilities: 12 high, 8 medium, 15 low Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137665 - Uncontrolled Search Path Element
CVE-2026-48272
CWE-427 Low
No
No
6.10.0.252.3 15.07.2026 SB2026071526
#VU137666 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-48344
CWE-367 Low
No
No
6.10.0.252.3 15.07.2026 SB2026071526
#VU119682 - Creation of Temporary File in Directory with Insecure Permissions
CVE-2025-64896
CWE-379 Low
No
No
6.8.0.821 10.12.2025 SB2025121051
#VU117082 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-54271
CWE-367 Low
No
No
6.8.0.821 14.10.2025 SB2025101483
#VU92119 - Uncontrolled Search Path Element
CVE-2024-34116
CWE-427 Medium
No
No
6.2.0.554 14.06.2024 SB2024061415
#VU73691 - Uncontrolled Search Path Element
CVE-2023-26358
CWE-427 High
No
No
5.10 14.03.2023 SB2023031482
#VU60449 - Uncontrolled Search Path Element
CVE-2022-23202
CWE-427 High
No
No
2.7.0.15 08.02.2022 SB2022020856
#VU58353 - Improper Access Control
CVE-2021-43019
CWE-284 High
No
No
5.6 24.11.2021 SB2021112411
#VU58076 - Creation of Temporary File With Insecure Permissions
CVE-2021-43017
CWE-378 Low
No
No
5.6.0.788 09.11.2021 SB2021110947
#VU56588 - Incorrect Default Permissions
CVE-2021-28613
CWE-276 Low
No
No
5.5.0.619 14.09.2021 SB2021091456
#VU53961 - Uncontrolled Search Path Element
CVE-2021-28594
CWE-427 Medium
No
No
5.4.5.550 09.06.2021 SB2021060904
#VU53960 - Insecure Temporary File
CVE-2021-28633
CWE-377 Low
No
No
5.4.5.550 09.06.2021 SB2021060904
#VU53137 - Unquoted Search Path or Element
CVE-2021-28581
CWE-428 Low
No
No
5.4.3.3.12.11.1 12.05.2021 SB2021051202
#VU51363 - Improper input validation
CVE-2021-21069
CWE-20 Medium
No
No
5.4.1.534 10.03.2021 SB2021031002
#VU51362 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-21078
CWE-78 High
No
No
5.4.1.534 10.03.2021 SB2021031002
#VU51361 - Unrestricted Upload of File with Dangerous Type
CVE-2021-21068
CWE-434 High
No
No
5.4.1.534 10.03.2021 SB2021031002
#VU47845 - Untrusted Search Path
CVE-2020-24422
CWE-426 High
No
No
5.3.1.470 21.10.2020 SB2020102121
#VU30124 - UNIX Symbolic Link (Symlink) Following
CVE-2020-9682
CWE-61 High
No
No
5.2.0.436 16.07.2020 SB20200716110
#VU30123 - UNIX Symbolic Link (Symlink) Following
CVE-2020-9670
CWE-61 High
No
No
5.2.0.436 16.07.2020 SB20200716110
#VU30122 - Permissions, Privileges, and Access Controls
CVE-2020-9671
CWE-264 Medium
No
No
5.2.0.436 16.07.2020 SB20200716110


Showing elements 1 - 20 out of 35