CVE-2024-34116: Adobe Creative Cloud Desktop Application

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Creative Cloud Desktop versions 6.1.0.587 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to load and execute malicious libraries, leading to arbitrary file delete. Exploitation of this issue requires user interaction.

Affected products

• Adobe Creative Cloud Desktop Application: before 6.2.0.554 (fixed in 6.2.0.554)

Published 2024-06-13. Last modified 2026-06-17.