Adobe Creative Cloud Desktop Application vulnerabilities

16 CVEs affecting Adobe Creative Cloud Desktop Application, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-48344, published 2026-07-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-9682, published 2020-07-17. Critical severity, CVSS 9.8. EPSS: 4.3% chance of exploitation in the next 30 days. Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful exploitation could lead to arbitrary file system write.
CVE-2020-9671, published 2020-07-17. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. Adobe Creative Cloud Desktop Application versions 5.1 and earlier have an insecure file permissions vulnerability. Successful exploitation could lead to privilege escalation.
CVE-2020-9670, published 2020-07-17. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. Adobe Creative Cloud Desktop Application versions 5.1 and earlier have a symlink vulnerability vulnerability. Successful exploitation could lead to privilege escalation.
CVE-2021-28594, published 2021-08-24. High severity, CVSS 7.8. EPSS: 2.7% chance of exploitation in the next 30 days. Adobe Creative Cloud Desktop Application (installer) version 2.4 (and earlier) is affected by an Uncontrolled Search Path Element vulnerability. An unauthenticated attacker could leverage this…
CVE-2021-21069, published 2021-03-12. High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days. Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to…
CVE-2022-23202, published 2022-02-16. High severity, CVSS 7.0. EPSS: 2.2% chance of exploitation in the next 30 days. Adobe Creative Cloud Desktop version 2.7.0.13 (and earlier) is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the…
CVE-2021-43019, published 2021-11-23. High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days. Adobe Creative Cloud version 5.5 (and earlier) are affected by a privilege escalation vulnerability in the resources leveraged by the Setup.exe service. An unauthenticated attacker could leverage…
CVE-2021-43017, published 2021-11-18. Medium severity, CVSS 4.2. EPSS: 1.2% chance of exploitation in the next 30 days. Adobe Creative Cloud version 5.5 (and earlier) are affected by an Application denial of service vulnerability in the Creative Cloud Desktop installer. An authenticated attacker with root privileges…
CVE-2021-21078, published 2021-03-12. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution…
CVE-2021-21068, published 2021-03-12. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by a file handling vulnerability that could allow an attacker to cause arbitrary file overwriting. Exploitation of this…

Latest

CVE-2026-48344, published 2026-07-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Creative Cloud Desktop is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in arbitrary code execution in the context of the current user. Exploit…
CVE-2026-48272, published 2026-07-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions…
CVE-2024-34116, published 2024-06-13. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. Creative Cloud Desktop versions 6.1.0.587 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in a security feature bypass. An attacker could exploit this…
CVE-2021-28547, published 2021-09-29. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Adobe Creative Cloud Desktop Application for macOS version 5.3 (and earlier) is affected by a privilege escalation vulnerability that could allow a normal user to delete the OOBE directory and get…
CVE-2021-28613, published 2021-09-27. High severity, CVSS 7.4. EPSS: 0.5% chance of exploitation in the next 30 days. Adobe Creative Cloud Desktop Application version 5.4 (and earlier) is affected by a file handling vulnerability that could allow an attacker to arbitrarily overwrite a file. Exploitation of this…
CVE-2021-28633, published 2021-08-24. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. Adobe Creative Cloud Desktop Application (installer) version 2.4 (and earlier) is affected by an Insecure temporary file creation vulnerability. An attacker could leverage this vulnerability to cause…